Application Security Engineer

Application Security Engineer role at Tempus focused on securing software throughout the development lifecycle. The position involves threat modeling, penetration testing, and securing AI/LLM-enabled systems handling sensitive clinical and genomic data.

Responsibilities

• Embed security controls into the software development lifecycle through threat modeling and design reviews
• Plan and conduct application security assessments and penetration tests of web applications and APIs
• Assess AI and LLM-enabled features for adversarial vulnerabilities and guardrail effectiveness
• Select and integrate security scanning tools into CI/CD pipelines and build automated guardrails
• Triage vulnerabilities, communicate findings to development teams, and support remediation efforts

Requirements

• 3-5 years application security, penetration testing, or security-focused software engineering experience
• Hands-on testing of web applications, APIs, and cloud services using tools like Burp Suite
• Experience with security design reviews at architecture level
• Working knowledge of securing AI and LLM-enabled applications and common attack vectors
• Practical experience with threat modeling methods such as STRIDE or PASTA
• Experience with SAST, DAST, and SCA tools integrated into CI/CD pipelines
• Proficiency in Python, Go, or JavaScript for security tooling and code review

Compensation: $85,000-$130,000