Application Security Engineer — AI-Driven Healthcare Apps

Tempus; Chicago (IL); On-site; USD 85,000 - 130,000; Full time

Job summary

Tempus is seeking an Application Security Engineer to secure how we build software, from design through release. You will partner with product and engineering teams to embed security into the SDLC, assess applications and APIs like an attacker, and secure AI/LLM-enabled systems as a core part of the role.

You will own defined security problems within your scope, with guidance from your lead, and collaborate closely with developers to remediate findings and strengthen defenses across web apps,

Qualifications

• 3-5 years of experience in application security, penetration testing, or software engineering with a security focus.
• Hands-on experience testing web applications, APIs, and cloud-hosted services, using proxying and penetration testing tools (e.g. Burp Suite).
• Experience securing AI/LLM-enabled applications, including prompt injection and data leakage concerns.

Responsibilities

• Embed security into the SDLC through threat modeling and secure design reviews.
• Plan and conduct security assessments and penetration tests of web apps, APIs, and cloud services.
• Threat model and assess AI/LLM-enabled features, including guardrails and data access controls.
• Integrate SAST, DAST, and SCA into CI/CD pipelines and build secure-by-default patterns.
• Reproduce, triage, and remediate vulnerabilities with developers.
• Communicate risk and remediation status to teams and leadership.

Skills

Application security

Penetration testing

Web applications

APIs

Cloud security

Security tooling

Code review

Security concepts

Communication

Tools

Burp Suite

CI/CD pipelines

SAST

DAST

SCA

Job description

Tempus is seeking an Application Security Engineer to secure how we build software, from design through release. You will partner with product and engineering teams to embed security into the SDLC, assess applications and APIs like an attacker, and secure AI/LLM-enabled systems as a core part of the role.

You will own defined security problems within your scope, with guidance from your lead, and collaborate closely with developers to remediate findings and strengthen defenses across web apps,