Job Description

Summary of the roleThe Application Security Engineer is an expert level application testing and threat response specialist within Marina Bay Sands\' Cyber Security Branch. The Application Security Engineer assesses the application security posture of Marina Bay Sands\' applications, designs & tunes application security tools and investigates application security related findings.The Application Security Engineer is also expected to provide focused effort and analysis of potential cyber incidents relating to application exploitation. This position is an individual contributor role and works closely with the global CSOC Monitoring Operations team members in other centers around the world.All duties are to be performed in accordance with the department and Marina Bay Sands\' policies, practices and procedures.Key Performance Objectives * Test and identify application security weaknesses, including vulnerabilities, insecure coding, logic flaws etc.

• Maintain and tune application security mitigation tools e.g. web application firewalls, API security.
• Investigate application security related alerts.
• Drive and implement new application security related initiatives.
• Participate in incident response activities relating to application security.

JOB SCOPE * Consistent and regular attendance is an essential function of this job.

• Test and identify application security weaknesses, including vulnerabilities, insecure coding, logic flaws etc.
• Ensure application security tools are maintained, reviewed and effective in detecting cyber threats.
• Support Cyber Security Operations Centre in investigating alerts relating to application security.
• Coordinate with other stakeholders to resolve cases relating to application security, where required.
• Participate in incident response activities relating to application security.
• Performs other related duties as assigned.

JOB REQUIREMENTS * Degree or diploma with at least 5-10 years of work experience in performing application security testing at all levels, including infrastructure, application, logic flow, interface, and source code.

• Professional cyber-related membership and certification in application security testing field is required.
• Experience in Integrated Resort, Banking or Critical Infrastructure InfoComm Industry is preferred, but not a must.
• Proven effective verbal and written communication skills.
• Knowledge required:
• Knowledge of security testing tools and techniques
• Knowledge of independent testing methods
• Knowledge of data manipulation principles and practices
• Knowledge of coding and testing standards
• Knowledge of code analysis tools and techniques
• Knowledge of black-box software testing
• Knowledge of web application security risks
• Knowledge of penetration testing tools and techniques
• Knowledge of penetration testing principles and practices
• Knowledge of Payment Card Industry (PCI) data security standards and best practices
• Knowledge of Personally Identifiable Information (PII) data security standards and best practices
• Knowledge of application firewall principles and practices
• Knowledge of software security principles and practices
• Knowledge of secure coding tools and techniques

• . Knowledge of web service protocols
• Skills required:
• Skill in performing static code analysis
• Skill in designing secure test plans
• Skill in interpreting signatures
• Skill in applying black-box software testing
• Skill in scanning for vulnerabilities
• Skill in performing threat modeling

Marina Bay Sands is committed to building a diverse, equitable and inclusive workforce, providing equal opportunities as we grow our talent base to match our growth ambitions in Singapore. Our employees are committed to adhere to and abide by all rules, regulations, policies and procedures, including the rules of conduct and business ethics of the Company.Advertised: 18 May 2024 Singapore Standard Time
Applications close:

Marina Bay Sands