Cyber Defense Analyst - Cyber Security

Overview

Join Marina Bay Sands and elevate your cybersecurity career by collaborating with industry experts in a dynamic and fulfilling work environment.

Key Responsibilities

• Proactively hunt threats by leveraging cyber threat intelligence, known adversary tactics, techniques, procedures, and emerging trends.
• Detect malicious or suspicious activities across endpoints, servers, cloud platforms, and network infrastructures.
• Record findings meticulously and suggest further investigative measures as needed.
• Conduct atomic testing to assess security controls, visibility, and response mechanisms.
• Validate the organisation's capability to identify known attacker behaviors and methodologies.
• Document results and propose enhancements to defensive strategies.
• Support red team and purple team exercises to evaluate and strengthen security controls.
• Engage in incident response by investigating cybersecurity incidents and managing digital forensic activities.
• Collect, preserve, and analyze digital evidence from various systems and endpoints.
• Assist in identifying attack scope, impacted assets, root causes, and attacker behavior.
• Contribute to containment, eradication, and recovery phases during security incidents.
• Perform event correlation and construct timelines to analyze suspicious or malicious events thoroughly.
• Maintain reliable and punctual attendance and undertake additional assigned duties.

Qualifications

• A degree or diploma with 5 to 10 years of practical cybersecurity experience in relevant domains.
• Preferred certifications include CISSP, GCFA, GREM, OSCP, CRTP, CRTO, and OSWE.
• Experience in sectors such as Gaming, Banking, or Critical Infrastructure Information and Communications Technology (InfoComm) is advantageous.
• Proficient with offensive security frameworks and tools like Cobalt Strike, Empire, Havoc, and Mythic.
• Experience configuring red team Command and Control (C2) infrastructures, including web servers, proxy servers, redirectors, and domain fronting techniques.
• Skilled at creating malicious payloads and familiar with obfuscation and encryption methods.
• Competent in at least one scripting language (e.g., Bash, PowerShell) or programming language (e.g., Python, C, C#, C++, Java).
• Solid understanding of fundamental networking principles and internet protocols such as TCP/IP, HTTP(S), SMTP, DNS, and SSL/TLS.
• Familiarity with recognized security testing standards and penetration testing methodologies.
• Strong written and oral communication skills.
• Comprehensive knowledge of enterprise technology, operations, and security assessment practices.

Diversity and Compliance

Marina Bay Sands embraces diversity, equity, and inclusivity in its workforce, striving to provide equal employment opportunities in line with company ethics, policies, and conduct standards.