Cybersecurity Analyst-2

Responsibilities

• ● Explore the possibilities across our global house of brands.
• ● Defined by inclusivity rather than exclusivity, Tapestry embraces the exploration of individuality and invests in helping you grow personally and professionally. Every individual in our global house has the opportunity to make an impact, learn and be part of our growing and unique story.
• ● At Tapestry, we have the freedom to express ourselves and run with our best ideas across Coach and Kate Spade New York. We share a profound belief in both our individual and collective potential, and know that with hard work and dedication, anything is possible.
• ● Primary Purpose
• ● We're looking for a Cybersecurity Analyst who likes chasing signals, investigating suspicious activity, and turning lessons from incidents into stronger defenses. You'll be part of the Cybersecurity team in APAC, reporting to the Director, Cybersecurity - APAC . You'll collaborate closely with global security operations, threat intelligence, security engineering, infrastructure, IT, and business teams.
• ● Expect a role with variety: some days you'll be deep in logs and endpoint data; other days you'll be building detections, validating controls, tracking remediation, or helping the team understand what a real-world adversary technique means for our environment.
• ● Based in Singapore, this role sits at the intersection of Blue Team operations and Purple Team engineering. You'll spend roughly 50% of your time responding to security events and supporting day-to-day defensive operations, and 50% translating adversary insights into better detections, mitigations, and measurable improvements across our security program.
• ● In short, you'll help defend the business today while making sure we're harder to attack tomorrow.
• ● The Key Responsibilities Are
• ● Blue Team: Respond, Investigate, Defend - 50%
• ● You'll be on the front line of security operations, helping identify, triage, investigate, and respond to suspicious activity across our environment.
• ● Monitor and respond to security alerts from SIEM, EDR, email security, identity, cloud, and network platforms.
• ● Investigate suspicious activity, determine scope and impact, and drive incidents toward clear resolution.
• ● Perform event triage, evidence collection, timeline development, and root-cause analysis.
• ● Partner with global security, IT, infrastructure, and business teams during security investigations.
• ● Tune alerts to improve signal quality and reduce noise.
• ● Document investigations, response actions, lessons learned, and recommended improvements.
• ● Support incident readiness activities, including playbooks, tabletop exercises, and response process improvements.
• ● Purple Team: Learn from the Adversary, Improve the Defense - 50%
• ● You'll help turn attacker tradecraft, incident learnings, vulnerability findings, and threat insights into practical defensive wins. This means improving detection and mitigation coverage while strengthening operational readiness.