Sr Analyst, Information Security

We believe that difference sparks brilliance, so we welcome people and ideas from everywhere to join us in stretching what’s possible.

 

At Tapestry, being true to yourself is core to who we are. When each of us brings our individuality to our collective ambition, our creativity is unleashed. This global house of brands – Coach, Kate Spade New York, Stuart Weitzman – was built by unconventional entrepreneurs and unexpected solutions, so when we say we believe in dreams, we mean we believe in making them happen. We’re always on a journey to becoming our best, but you can count on this: Here, your voice is valued, your ambitions are supported, and your work is recognized.

A member of the Tapestry family, we are part of a global house of brands that has unwavering optimism and is committed to being innovative and wholly inclusive. Visit Our People page to learn more about Tapestry's commitment to equity, inclusion, and diversity. 

 

Job Title: Sr. Cybersecurity Analyst

Primary Purpose:

The Sr. Cybersecurity analyst will be mainly responsible for monitoring and assessing potential threats and ensuring Tapestry’s environment meets applicable security standards. Their duties will include

working closely with our SOC MSSP to address Incidents and helping drive operational excellence.

They will also be required to report security findings and recommend corrective actions to relevant support teams.

The resource will be responsible to assist with formulation and distribution of Cybersecurity Metrics that demonstrate security coverage, risks, and remediation effectiveness.

 

The analyst will be granted access to industry leading security tools but must keep aware of changes and improvements in technology and relevant frameworks to support their duties.

 

The ideal candidate must be able to work independently and have strong communication skills.

 

 

The successful individual will leverage their proficiency in Cybersecurity to  

 

• Perform network monitoring, intrusion, or anomaly detection analysis

• Monitor and distribute security notifications in adherence with the established notification / security information sharing protocols.

• Maintain our SIEM solution by handling Log Source management, Building Block and NW Hierarchy updates on ongoing basis.
• Perform threat hunting and threat assessments
• Identify and help resolve false positive findings reported across our security tools
• Generate reports on security findings and track remediation tasks

 

The accomplished individual will posses

 

• Knowledge of and experience with standard network logging formats, security information and event management and security monitoring systems.
• Technical expertise in security engineering, cloud computing (AWS/Azure), system and network security, authentication and security protocols, cryptography, and application security
• Technical expertise in IT systems, network, and web-related protocols (e.g., TCP/IP, IPSEC, HTTP, TLS, DNS etc.)
• Experience in working with current IT security standards and frameworks e.g., NIST Cybersecurity Framework (CSF), MITRE ATT&CK, CIS and others.
• Strong understanding of Data Security and Regulatory Standards including Payment Card Industry (PCI) and Sarbanes-Oxley (SOX)
• Strong critical thinking and analytical skills
• Excellent written and oral communications skills
• Solid presentation skills
• Ability to understand business needs and commitment to delivering high-quality, prompt, and efficient service to the business

 

An outstanding professional will have

 

• BS in Computer Science, Information Security, or a related field
• 5+ years of experience in Information Security, specifically in an analyst role on a Computer Incident Response Team (CIRT), Computer Emergency Response Team (CERT), Computer Security Incident Response Center (CSIRC) or a Security Operations Center (SOC)
• Knowledge of and experience with Attack Surface Management
• Industry Certifications such as CISSP, CISM, CISA, CEH are considered a plus

 

​

Our Competencies for All Employees

• Courage: Doesn’t hold back anything that needs to be said; provides current, direct, complete, and “actionable” positive and corrective feedback to others; lets people know where they stand; faces up to people problems on any person or situation (not including direct reports) quickly and directly; is not afraid to take negative action when necessary.
• Creativity: Comes up with a lot of new and unique ideas; easily makes connections among previously unrelate