Sr Application Security Engineer - AI-First Development

Role Description

The primary responsibility of the Senior Application Security Engineer (AI-First Development) is to design, orchestrate, and validate the offensive security tooling and adversary-emulation capabilities used to find, prove, and help remediate exploitable weaknesses across applications, infrastructure, the software supply chain, and AI/ML systems. This role operates within an AI-First SDLC in which AI agents serve as primary producers of offensive tooling, exploit proof-of-concept code, attack automation, and adversary-emulation artifacts, while the engineer provides operational direction, context engineering, human-in-the-loop governance, and final accountability for the safety, authorization, and effectiveness of all offensive security work.

All duties are to be performed in accordance with departmental and Las Vegas Sands Corp.’s policies, practices, and procedures. All Las Vegas Sands Corp. Team Members are expected to conduct and carry themselves in a professional manner at all times.

Qualifications

• At least 21 years of age.
• Proof of authorization to work in the United States.
• Bachelor's degree in Computer Science, Software Engineering, Cybersecurity, or a related field, or equivalent professional experience.
• Must be able to obtain and maintain any certification or license, as required by law or policy.
• 5+ years of professional software engineering or offensive security experience.
• Demonstrated daily use of at least one modern AI-assisted development tool.
• Strong foundational knowledge in at least one major programming or scripting ecosystem.
• Experience assessing or exploiting workloads on at least one major cloud platform.
• Hands-on experience conducting offensive security work.
• Solid working knowledge of Windows and Linux internals, networking fundamentals, and enterprise identity systems.
• Demonstrated experience conducting thorough code reviews.
• Excellent written and verbal communication skills.
• Strong interpersonal skills.

Requirements

• Design, build, and maintain AI agent workflows.
• Decompose engagement objectives and threat scenarios.
• Select and configure appropriate AI models and offensive tooling.
• Construct and maintain operational context for agents.
• Systematically capture attack patterns and findings.
• Participate in collaborative refinement sessions.
• Establish and maintain rules of engagement.
• Apply human oversight at governance checkpoints.
• Review, test, and approve AI-generated offensive tooling.
• Verify that AI-generated exploits demonstrate genuine impact.
• Partner with Cyber Security on Threat and Risk Assessments.
• Support agent observability practices.
• Produce clear, reproducible engagement deliverables.
• Architect and deliver shared offensive tooling.
• Define attack methodologies and engagement playbooks.
• Collaborate with cross-functional teams.
• Coordinate with security and engineering teams.
• Write, debug, and refactor exploit code.
• Ensure delivered offensive tooling meets enterprise standards.
• Design and execute offensive testing of AI and LLM-based systems.
• Evaluate emerging AI models and attack techniques.
• Mentor team members on AI-assisted offensive security practices.
• Document attack patterns and lessons learned.
• Participate in collaborative construction sessions.
• Perform job duties in a safe manner.
• Attend work as scheduled.
• Perform other related duties as assigned.

Benefits

• Competitive salary and performance-based bonuses.
• Comprehensive health benefits.
• Retirement savings plan with company match.
• Professional development opportunities.
• Flexible work arrangements.

Company Description

Las Vegas Sands Corp. is committed to providing a professional environment where all Team Members can thrive. The company emphasizes integrity, teamwork, and respect in all interactions.