Cyber Defense Analyst, Cyber Security

605 Marina Bay Sands Pte Ltd; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Marina Bay Sands is seeking a senior cybersecurity professional to lead threat hunting, security validation, and red/purple team activities across on-prem and cloud environments. You will conduct forensic investigations and drive incident response while documenting findings and strengthening defenses.

The role requires 5–10 years of experience and relevant certifications. You will collaborate with IT and security teams, develop robust security controls, and contribute to incident containment,

Qualifications

• Degree or diploma in cybersecurity with hands-on experience.
• Certifications such as CISSP, GCFA, GREM, OSCP improve candidacy.
• Experience with offensive security tools and red team operations.

Responsibilities

• Conduct proactive threat hunting using cyber threat intelligence and detect malicious activity across endpoints, servers, cloud, and networks.
• Perform atomic testing to validate security controls, visibility, and response capabilities; document findings and recommendations.
• Support red team and purple team exercises to assess control effectiveness.
• Participate in cyber incident investigations, response activities, and digital forensics across systems and endpoints.
• Assist in containment, eradication, and recovery during incidents and reconstruct event timelines.

Skills

Threat hunting

Python

PowerShell

Networking concepts

Incident response

Scripting

Education

Bachelor's degree or diploma in cybersecurity

CISSP

GCFA

GREM

OSCP

CRTP

CRTO

OSWE

Tools

Cobalt Strike

Empire

Havoc

Mythic

Job description

Job Responsibilities

• Threat Hunting
  • Conduct proactive threat hunting activities based on cyber threat intelligence sources, known adversary tactics, techniques, and procedures (TTPs), and emerging threat trends.
  • Identify malicious or suspicious activities across endpoints, servers, cloud environments, and network infrastructure.
  • Document findings and recommend further investigative actions where necessary.
• Atomic Testing & Security Validation
  • Perform atomic testing activities to validate security controls, visibility, and response capabilities.
  • Validate the organization’s ability to detect known adversary behaviors and attack techniques.
  • Document findings and recommendations for defensive improvements.
• Red & Purple Team Activities
  • Support red team and purple team exercises to assess the effectiveness of security controls and defensive capabilities.
• Forensics and Incident Response
  • Participate in cyber incident investigations and response activities.
  • Perform digital forensic collection, preservation, and analysis of systems, endpoints, and relevant artifacts.
  • Assist in determining attack scope, affected assets, root cause, and attacker activities.
  • Support containment, eradication, and recovery activities during cybersecurity incidents.
  • Conduct event correlation, timeline reconstruction, and investigation of suspicious or malicious activities to determine affected assets, root cause, attacker techniques, indicators of compromise (IOCs), and potential data exposure.
• General Responsibilities
  • Ensure consistent and regular attendance.
  • Perform other related duties as assigned.

Job Requirements

• Education & Certification
  • Degree or diploma with at least 5-10 years of hands‑on cybersecurity experience in relevant areas.
  • Preferred certifications: CISSP, GCFA, GREM, OSCP, CRTP, CRTO, OSWE.
• Experience
  • Experience in Gaming, Banking, or Critical Infrastructure InfoComm Industry is an advantage.
  • Proficiency with offensive security tools such as Cobalt Strike, Empire, Havoc, Mythic.
  • Experience in setting up red teaming Command and Control (C2) infrastructure, including web/proxy servers, redirectors, domain fronting.
  • Skills in developing malicious payloads and understanding obfuscation and encryption techniques.
  • Proficiency in at least one scripting language (e.g., Bash, PowerShell) and/or programming language (e.g., Python, C, C#, C++, Java).
  • Understanding of basic networking concepts and Internet protocols (TCP/IP, HTTP(S), SMTP, DNS, SSL/TLS).
  • Knowledge of industry-recognized security testing standards and penetration testing methodology.
• Other Prerequisites
  • Effective verbal and written communication skills.
  • Strong understanding of enterprise technologies, operations, and security evaluations.

Marina Bay Sands is committed to building a diverse, equitable and inclusive workforce, providing equal opportunities as we grow our talent base to match our growth ambitions in Singapore.