Sr Application Security Engineer - Cyber Security

Position Overview The primary responsibility of the Sr Engineer – Cyber Security is to design, implement, and support application security capabilities that integrate into the company’s Software Development Lifecycles (SDLCs). This role partners with development, platform engineering, and cyber security teams to assess application risk, integrate security into CI/CD and AI-assisted development workflows, and drive secure, scalable software delivery through security tooling, secure coding practices, and vulnerability remediation. All duties are to be performed in accordance with departmental and Las Vegas Sands Corp.’s policies, practices, and procedures. All Las Vegas Sands Corp.

Members are expected to conduct and carry themselves in a professional manner at all times.

Members are required to observe the Company’s standards, work requirements and rules of conduct.  Essential Duties & Responsibilities Develop, implement, and support application security programs across Software Development Lifecycles (SDLCs), including technology integration, workflow design, documentation, training, and stakeholder enablement. Evaluate SDLCs and advise on application security technologies, integration points, AI-assisted threat modeling, risk analysis, and process improvements to reduce software security risk. Perform code, vulnerability, and configuration analysis using manual review, automated application security testing solutions, agentic-code review capabilities, and AI-enhanced pipeline security controls, including SAST and DAST tools. Partner with development teams to prioritize product vulnerabilities, validate mitigation urgency, and provide remediation guidance and recommendations. Integrate AI-enhanced security automation into CI/CD pipelines, including agentic-code analysis, AI-assisted threat modeling, automated triage, risk-based release gating, and feedback loops that improve developer remediation workflows. Configure, implement, maintain, troubleshoot, and support capacity planning for cyber security tools, devices, infrastructure, and application security technologies. Monitor tool health, respond to security outputs, and tune solutions to support reliable performance, business-focused monitoring, and program objectives. Respond to cyber security events and incidents with professionalism and support practice exercises for use case driven alerts and incidents. Identify security requirements and support cyber security architecture, secure configuration, and product security reviews across heterogeneous computing environments. Create and maintain cyber security documentation, including design materials, standard operating procedures, protocols, diagrams, metrics, reports, and presentations. Collaborate with cyber security, IT, business, development, quality assurance, and administrative teams to troubleshoot issues, support operational needs, and promote secure software development practices. Manage operational requests by submitting and responding to tickets, preparing change management items, and participating in Change Approval Board (CAB) meetings. Stay current on malware, infiltration and investigative techniques, forensics, application security practices, and the evolving threat environment. Mentor junior engineers to develop job competency, technical skills, and cyber security expertise. Perform job duties in a safe manner. Attend work as scheduled on a consistent and regular basis. Perform other related duties as assigned.

At least 21 years of age. Proof of authorization to work in the United States. Bachelor’s degree in Computer Science or related field. Must be able to obtain and maintain any certification or license, as required by law or policy.  5 - 7 years of experience in cyber security or information technology. Experience in at least 5 of the following: Secure SDLC, DevSecOps, or application security program support Implementing application security