Las Vegas Sands Corp.

Role Description The primary responsibility of the Application Security Engineer – Cyber Security is to design, implement, and support the company’s overall information security infrastructure. This engineer sits at the intersection of application security, platform engineering, and AI-assisted development to embed security directly into modern AI-driven development workflows, ensuring secure, scalable software delivery while maintaining development velocity. All duties are to be performed in accordance with departmental and Las Vegas Sands Corp.’s policies, practices, and procedures. All Las Vegas Sands Corp. Team Members are expected to conduct and carry themselves in a professional manner at all times. Team Members are required to observe the Company’s standards, work requirements and rules of conduct. Qualifications - At least 21 years of age - Proof of authorization to work in the United States - Bachelor’s degree in Computer Science or related field or 3 years of experience in cyber security or information technology. - Must be able to obtain and maintain any certification or license, as required by law or policy - Strong experience with CI/CD pipeline engineering and security integration - Hands-on experience with AI-assisted development tools and workflows (e.g., agents, code generation) - Proficiency with GitHub Copilot and familiarity with Claude Code and other AI tools - Practical experience in application security and threat modeling (beyond theoretical frameworks) - Ability to review code (PRs) from a security perspective and articulate risk and impact - Experience integrating security scanning tools into development pipelines - Understanding of risk-based security controls and enforcement (security gates) - Experience in at least 4 of the following: - System Administration - Network Administration - Installing and implementing security appliances - Capacity planning - Network architecture - Cyber forensics - Data Loss Prevention - Firewall administration - IDS/IPS installation, implementation and maintenance - Vulnerability and security configuration scanning - Vulnerability and configuration exploit software - Anti-virus and anti-malware hardware and software - SIEM installation, implementation and maintenance - Cyber incident response - Secure configuration management - Threat intelligence - Metrics development - Problem solving skills and the ability to work under pressure in a constantly changing environment - Ability to manage deadlines and changing priorities - Must be self-motivated and a team player collaborating with a team that spans the globe - Demonstrates responsibility and accountability - Must be able to communicate effectively with team members, management, senior management and consultants both verbally and in writing - Must be able to create and document network and system diagrams - Must be able to write understandable procedures - Must be able to respond to calls as needed (24/7) - Must be able to design, install and implement cyber infrastructure solutions that integrate with the existing infrastructure - Ability to demonstrate a calm demeanor when faced with chaotic circumstances - Knowledge of networking concepts and principles - Effective written and verbal communication skills in English - Experience integrating security tool stacks into AI/ML pipelines is preferred - Strong soft skills and developer empathy; ability to balance security rigor with engineering velocity is preferred Requirements - Configure and troubleshoot a wide variety of cyber security devices - Implement and maintain cyber tools - Monitor and respond to output from cyber tools’ health - Tune tools for optimum performance and business focused monitoring - Capacity planning for cyber devices - Respond to events/incidents with knowledge, efficiency, and professionalism - Create and participate in cyber security practice exercises - Identify and define system security requirements for a heterogeneous computing environment (Microsoft, IBM, Linux, proprietary OS, Industrial Control Systems) - Design cyber security architecture in accordance with IT architects and current and forward-looking network design - Create, develop, and maintain detailed cyber security design documentation - Prepare, document, and maintain standard operating procedures and protocols - Submit and respond to tickets from an automated ticketing system - Prepare change management items and participate in the Change Approval Board (CAB) meetings - Create and maintain metrics - Participate in incident response activities - Create various types of reports and present to a varied audience - Perform job duties in a safe manner - Attend work as scheduled on a consistent and regular basis - Perform other related duties as assigned Benefits - Work remotely as necessary - Work indoors and be exposed to various environmental factors such as, but not limited to, CRT, noise, and dust - Utilize laptop and standard keyboard to perform essential functions of the job Physical Requirements - Must be able to physically access assigned workspace areas with or without reasonable accommodation

• Design, orchestrate, and validate the automated verification systems for AI-First Software Development Lifecycle. • Operate within an AI-First SDLC, providing test strategy and quality accountability. • Design, build, and maintain AI agent workflows for various test suites from specifications. • Construct and maintain test context for agents to provide correct test outputs. • Support independent QA verification and contribute to system testing in production-like environments. • Collaborate with cross-functional teams to translate business requirements into validation workflows.

• Design, orchestrate, and validate offensive security tooling and adversary-emulation capabilities. • Operate within an AI-First SDLC using AI agents for producing offensive tooling, exploit proof-of-concept code, and attack automation. • Author advanced toolchain components and maintain operational context for AI agents. • Review, test, and approve AI-generated offensive tooling and exploit code. • Produce clear engagement deliverables, including technical findings reports and remediation recommendations. • Collaborate with cross-functional teams to translate threat scenarios into executable workflows.

• The primary responsibility of the Senior Software Engineer (AI-First Development) is to design, orchestrate, and validate software applications built through AI-driven development workflows. • This role operates within an AI-First Software Development Lifecycle (SDLC) where AI agents serve as the primary producers of code, configuration, and test artifacts. • The engineer provides architectural direction, context engineering, human-in-the-loop governance, and final accountability for all delivered software. • Combine deep software engineering fundamentals with the ability to think in systems, design effective agent workflows, and validate AI-generated outputs across security, correctness, performance, and compliance dimensions. • Design, build, and maintain AI agent workflows that produce application code, infrastructure configuration, test suites, and documentation. • Decompose complex application requirements into discrete tasks that AI agents can execute effectively. • Select and configure appropriate AI models, agent frameworks, and tooling for each workflow based on task complexity, risk level, and cost considerations. • Author and maintain the agent toolchain, including Skills (SKILL.md) for reusable domain knowledge, hooks for deterministic automation at defined workflow points, and project memory files (CLAUDE.md, AGENTS.md). • Review, test, and approve AI-generated code, ensuring it meets Sands coding standards, architectural guidelines, and security requirements before promotion to production. • Coordinate with development teams across global locations to ensure consistency in agent workflows and coding standards. • Evaluate emerging AI models, agent frameworks, and development tools to continuously improve workflow effectiveness and output quality.

• Direct the day-to-day technical execution of a small AI-First engineering team • Architect and deliver full-stack applications using AI-First methodologies • Define and maintain AI agent workflows • Collaborate with cross-functional teams to translate business requirements into executable workflows • Mentor team members on AI-assisted development practices

Job Description: Position Overview The Intellectual Property Paralegal - Corporate will support the management of the company’s global intellectual property portfolio, including trademarks, domains, patents, and copyrights. This role may also involve assisting with IP-related litigation. The ideal candidate will have a strong understanding of IP laws and regulations, excellent organizational skills, and the ability to align legal strategies with business objectives. All duties are to be performed in accordance with departmental and Las Vegas Sands Corp.’s policies, practices, and procedures. All Las Vegas Sands Corp. Team Members are expected to conduct and carry themselves in a professional manner at all times. Team Members are required to observe the Company’s standards, work requirements and rules of conduct. Essential Duties & Responsibilities - Assist with global trademark portfolio management, including clearance searches, registration, maintenance, and enforcement. - Support the preparation, filing, and prosecution of patent applications. - Assist with copyright registration and enforcement activities. - Manage the global domain portfolio, including availability assessments, acquisition, maintenance, and strategic recommendations. - Analyze complex IP issues and provide strategic input that integrates legal and business considerations. - Identify and implement improvements to the operation of the IP program, including cost efficiencies, auditing procedures, and process enhancements. - Perform job duties in a safe manner. - Attend work as scheduled on a consistent and regular basis. - Perform other related duties as assigned. Minimum Qualifications - At least 21 years of age. - Proof of authorization/eligibility to work in the United States. - Bachelor's Degree required. - Must be able to obtain and maintain any certification or license, as required by law or policy. - Minimum of 5 years of experience managing large trademark portfolios at a law firm or in-house legal department. - Solid understanding of U.S. and international IP laws and procedures. - Experience with USPTO filings and international IP filings. - Familiarity with IP docketing systems and management tools is preferred. - Strong attention to detail and ability to manage multiple projects simultaneously. - Excellent written and verbal communication skills. - Ability to work collaboratively across businesses and with external counsel. - Strong interpersonal skills with the ability to communicate effectively with guests and other Team Members of different backgrounds and levels of experience. Physical Requirements Must be able to: - Lift or carry 10 pounds, unassisted, in the performance of specific tasks, as assigned. - Physically access assigned workspace areas with or without reasonable accommodation. - Work remotely as necessary. - Work indoors and be exposed to various environmental factors such as, but not limited to, CRT, noise, and dust. - Utilize laptop and standard keyboard to perform essential functions of the job.

• The primary responsibility of the Executive Director - Central Head of DevSecOps is to oversee the standards, tooling and organizations globally providing infrastructure, application security, administration, configuration, troubleshooting, automation and delivery lifecycle of solutions within Sands. • The DevSecOps functions globally will deploy and support cloud and on-premises infrastructure and services to meet the requirements of business or IT initiatives. • The teams will develop, maintain and execute infrastructure as code scripts and playbooks to automate deployment and maintenance tasks to ensure the availability, reliability, and efficient operation of the enterprise systems. • The Executive Director will work with the leads of DevSecOps globally to ensure consistency across their local disciplines, optimize solutions, and to ensure best practice DevOps and security measures are applied to the solutions. • The position demands someone who is highly technically competent, detail oriented, and driven to stay current with evolving technologies. • In this role, the Executive Director will be responsible for managing the global teams of DevOps Engineers, and AppSec Engineers responsible for overall technical security posture of developed applications and infrastructure. • The DevSecOps teams will work closely with the Corp IT and Corp Cyber Security leadership in coordinating the strategy, architecture and security initiatives and all auditing activities across all team activities. • A key part of the position is supporting compliance efforts related to secure SDLC processes and infrastructure.