Sr Application Security Engineer - Cyber Security

Las Vegas Sands Corp.; Las Vegas (NV); On-site; USD 120,000 - 180,000; Full time

Job summary

Las Vegas Sands Corp. is seeking a Sr Engineer – Cyber Security to design, implement, and support application security within our SDLCs.

You will collaborate with development, QA, and cyber security teams to evaluate risk, operate AppSec technologies, and guide remediation of vulnerabilities. Responsibilities include building security programs across SDLCs, performing vulnerability analysis with SAST/DAST, and mentoring junior engineers while staying current on threats and best practices to

Qualifications

• Bachelor’s degree in Computer Science or related field.
• 5 - 7 years of experience in cyber security or information technology.
• Experience in at least 5 of the following: problem solving under pressure, deadlines, teamwork across global teams, communication with management and consultants, ability to document network and system diagrams, write understandable procedures, be available 24/7, design and implement cyber infrastructure solutions.

Responsibilities

• Develop and support application security programs across SDLCs, including integration, workflows, documentation, training, and stakeholder enablement.
• Evaluate SDLCs and advise on security technologies, integration points, and process improvements to reduce software security risk.
• Perform code, vulnerability, and configuration analysis using manual review and automated AppSec testing solutions (SAST/DAST).
• Partner with development teams to prioritize product vulnerabilities and provide remediation guidance.
• Configure, implement, maintain, and troubleshoot cyber security tools, devices, infrastructure, and AppSec technologies.

Skills

AppSec

SAST/DAST

SDLC Integration

Vulnerability Assessment

Threat Modeling

Cross-functional Collaboration

Mentoring

Education

Bachelor's in CS or related

Tools

SAST tools

DAST tools

SIEM

Cloud security tools

Job description

Job Description:

Position Overview

The primary responsibility of the Sr Engineer – Cyber Security is to design, implement, and support application security capabilities that integrate into the company’s Software Development Lifecycles (SDLCs). This role partners with development, quality assurance, and cyber security teams to evaluate application risk, operate AppSec technologies, support secure coding practices, and guide remediation of software vulnerabilities.

All duties are to be performed in accordance with departmental and Las Vegas Sands Corp.’s policies, practices, and procedures. All Las Vegas Sands Corp. Team Members are expected to conduct and carry themselves in a professional manner at all times. Team Members are required to observe the Company’s standards, work requirements and rules of conduct.

Essential Duties & Responsibilities

• Develop, implement, and support application security programs across Software Development Lifecycles (SDLCs), including technology integration, workflow design, documentation, training, and stakeholder enablement.

• Evaluate SDLCs and advise on application security technologies, integration points, and process improvements to reduce software security risk.

• Perform code, vulnerability, and configuration analysis using manual review and automated application security testing solutions, including SAST and DAST tools.

• Partner with development teams to prioritize product vulnerabilities, validate mitigation urgency, and provide remediation guidance and recommendations.

• Configure, implement, maintain, troubleshoot, and support capacity planning for cyber security tools, devices, infrastructure, and application security technologies.

• Monitor tool health, respond to security outputs, and tune solutions to support reliable performance, business-focused monitoring, and program objectives.

• Respond to cyber security events and incidents with professionalism and support practice exercises for use case driven alerts and incidents.

• Identify security requirements and support cyber security architecture, secure configuration, and product security reviews across heterogeneous computing environments.

• Create and maintain cyber security documentation, including design materials, standard operating procedures, protocols, diagrams, metrics, reports, and presentations.

• Collaborate with cyber security, IT, business, development, quality assurance, and administrative teams to troubleshoot issues, support operational needs, and promote secure software development practices.

• Manage operational requests by submitting and responding to tickets, preparing change management items, and participating in Change Approval Board (CAB) meetings.

• Stay current on malware, infiltration and investigative techniques, forensics, application security practices, and the evolving threat environment.

• Mentor junior engineers to develop job competency, technical skills, and cyber security expertise.

• Perform job duties in a safe manner.

• Attend work as scheduled on a consistent and regular basis.

• Perform other related duties as assigned.

Minimum Qualifications

• At least 21 years of age.

• Proof of authorization to work in the United States.

• Bachelor’s degree in Computer Science or related field.

• Must be able to obtain and maintain any certification or license, as required by law or policy.

• 5 - 7 years of experience in cyber security or information technology.

• Experience in at least 5 of the following:

• Problem solving skills and the ability to work under pressure in a constantly changing environment.

• Ability to manage deadlines and changing priorities.

• Must be self-motivated and a team player collaborating with a team that spans the globe.

• Demonstrates responsibility and accountability.

• Must be able to communicate effectively with team members, management, senior management and consultants both verbally and in writing.

• Must be able to create and document network and system diagrams.

• Must be able to write understandable procedures.

• Must be able to respond to calls as needed (24/7).

• Must be able to design, install and implement cyber infrastructure solutions that integrate with the existing infrastructure.

• Ability to demonstrate a calm demeanor when faced with chaotic circumstances.

• Knowledge of networking concepts and principles.

• Strong interpersonal skills with the ability to communicate effectively with guests and other Team Members of different backgrounds and levels of experience.

• Must be able to work varied shifts, including nights, weekends and holidays.

Physical Requirements

Must be able to:

• Physically access assigned workspace areas with or without reasonable accommodation.

• Work remotely as necessary.

• Work indoors and be exposed to various environmental factors such as, but not limited to, CRT, noise, and dust.

• Utilize laptop and standard keyboard to perform essential functions of the job.