Senior Director, Adversary Services

Há 1 dia

lisboa, Portugal Tapestry, Inc. Tempo integral
Senior Director, Adversary Services### Senior Director, Adversary ServicesApply: Lisbon, PRT (Portugal Corporate Office): Full time: Posted Today: JR20459Explore the possibilities across our global house of brands.
Defined by inclusivity rather than exclusivity, Tapestry embraces the exploration of individuality and invests in helping you grow personally and professionally. Every individual in our global house has the opportunity to make an impact, learn and be part of our growing and unique story.
At Tapestry, we have the freedom to express ourselves and run with our best ideas across Coach and Kate Spade New York. We share a profound belief in both our individual and collective potential, and know that with hard work and dedication, anything is possible. Primary Purpose: The Senior Director will be responsible for translating real-world adversary behavior into actionable security outcomes, enhancing detection capabilities, strengthening resilience, and enabling informed risk-based decision-making across the organization, with a particular focus on cloud environments. Through the integration of threat intelligence, adversary emulation, red teaming, and detection engineering, the Senior Director will proactively identify, simulate, and mitigate evolving cyber threats while advancing enterprise cybersecurity objectives.The successful individual will leverage their proficiency in Cybersecurity to:Adversary Services Strategy & Program Leadership* Define and execute the strategic vision, operating model, and roadmap for the Adversary Services function
* Lead and oversee multiple specialized cybersecurity teams and capabilities, including Threat Intelligence, Adversary Emulation, Red Team Operations, Detection Validation, and Security Research
* Set organizational priorities, allocate resources, and balance investments across the Adversary Services sub-function to drive strategic objectives, strengthen enterprise security outcomes, and support enterprise risk management and business priorities
* Establish standards for engagement planning, execution, reporting, and measurement of program impact Threat Intelligence & Actor Tracking* Lead ongoing tracking and analysis of relevant threat actors, including eCrime groups, ransomware operators, and targeted intrusion actors
* Translate intelligence into actionable hypotheses aligned to organizational risk, including business initiatives and cloud environments
* Maintain comprehensive adversary playbooks mapped to frameworks such as MITRE ATT&CK Adversary Emulation & Red Team Operations* Design and execute high-fidelity adversary emulation campaigns grounded in real-world attacker tradecraft
* Conduct red team engagements to assess the effectiveness of preventative, detective, and response controls across identity, endpoint, SaaS, and cloud platforms
* Develop and scale reusable tooling, automation, and emulation capabilities Detection Engineering & Security Partnerships* Partner closely with Detection Engineering and Blue Team functions to develop and refine behavior-based detections
* Contribute to the development and tuning of analytics across cloud telemetry, including identity, control plane, and workload signals
* Drive continuous validation cycles (emulate → detect → refine → measure) through purple team exercisesExecutive Engagement & Risk Advisory* Deliver clear, data-driven briefings to senior leadership on threat-driven risk and its impact on key business initiatives
* Drive security outcomes that materially improve the organization's ability to manage cyber risk, protect critical business initiatives, strengthen operational resilience, and support enterprise growth objectives
* Direct the resolution of highly complex and multifaceted cybersecurity challenges involving emerging threats, cloud security, identity security, detection effectiveness, and enterprise risk management
* Provide prioritized recommendations on threats, attack paths, control gaps, and investment decisions
* Represent Adversary Services in governance forums, incident response escalations, and strategic security initiatives The accomplished individual will possess:* 10+ years of experience across a combination of: + Threat Intelligence (including adversary tracking and TTP analysis) + Red Teaming, Adversary Emulation, or Purple Teaming + Offensive Security or Security Consulting
* Proven ability to lead senior technical teams and influence cross-functional stakeholders, including executives
* Strong understanding of attacker methodologies, including identity compromise, phishing, lateral movement, persistence, privilege escalation, and data exfiltration
* Comprehensive understanding of cybersecurity program interdependencies across Technology, Infrastructure, Cloud Platforms, Digital, Data, and Enterprise Risk functions, with the ability to assess threats within a global business environmentAn outstanding professional will have:* Offensive security certif