Analyst III

Summary of the role

The Application Security Engineer is an expert level application testing and threat response specialist within Marina Bay Sands’ Cyber Security Branch. The Application Security Engineer assesses the application security posture of Marina Bay Sands’ applications, designs & tunes application security tools and investigates application security related findings.

The Application Security Engineer is also expected to provide focused effort and analysis of potential cyber incidents relating to application exploitation. This position is an individual contributor role and works closely with the global CSOC Monitoring Operations team members in other centers around the world.

All duties are to be performed in accordance with the department and Marina Bay Sands’ policies, practices and procedures.

Key Performance Objectives

Test and identify application security weaknesses, including vulnerabilities, insecure coding, logic flaws etc. Maintain and tune application security mitigation tools e.g. web application firewalls, API security. Investigate application security related alerts. Drive and implement new application security related initiatives. Participate in incident response activities relating to application security.

JOB SCOPE

Consistent and regular attendance is an essential function of this job. Test and identify application security weaknesses, including vulnerabilities, insecure coding, logic flaws etc. Ensure application security tools are maintained, reviewed and effective in detecting cyber threats. Support Cyber Security Operations Centre in investigating alerts relating to application security. Coordinate with other stakeholders to resolve cases relating to application security, where required. Participate in incident response activities relating to application security. Performs other related duties as assigned.

JOB REQUIREMENTS

Degree or diploma with at least 5-10 years of work experience in performing application security testing at all levels, including infrastructure, application, logic flow, interface, and source code. Professional cyber-related membership and certification in application security testing field is required. Experience in Integrated Resort, Banking or Critical Infrastructure InfoComm Industry is preferred, but not a must. Proven effective verbal and written communication skills. Knowledge required: Knowledge of security testing tools and techniquesKnowledge of independent testing methodsKnowledge of data manipulation principles and practicesKnowledge of coding and testing standardsKnowledge of code analysis tools and techniquesKnowledge of black-box software testingKnowledge of web application security risksKnowledge of penetration testing tools and techniquesKnowledge of penetration testing principles and practicesKnowledge of Payment Card Industry (PCI) data security standards and best practicesKnowledge of Personally Identifiable Information (PII) data security standards and best practicesKnowledge of application firewall principles and practicesKnowledge of software security principles and practicesKnowledge of secure coding tools and techniques . Knowledge of web service protocols Skills required: Skill in performing static code analysisSkill in designing secure test plansSkill in interpreting signaturesSkill in applying black-box software testingSkill in scanning for vulnerabilitiesSkill in performing threat modeling

Marina Bay Sands is committed to building a diverse, equitable and inclusive workforce, providing equal opportunities as we grow our talent base to match our growth ambitions in Singapore. Our employees are committed to adhere to and abide by all rules, regulations, policies and procedures, including the rules of conduct and business ethics of the Company.

---