Application Security Engineer: AI & Genomics

Tempus AI; Chicago (IL); On-site; USD 85,000 - 130,000; Full time

Job summary

Tempus AI is seeking an Application Security Engineer to weave security into the software development lifecycle, securing AI/LLM-enabled systems and APIs. You will partner with product and engineering teams to perform risk-based security assessments and guide remediation across web apps, cloud services, and automation pipelines.

The role focuses on threat modeling, security reviews, and building secure-by-default patterns, with frequent collaboration across multidisciplinary teams.

Qualifications

• 3–5 years of experience in application security, penetration testing, or security-focused software engineering.
• Hands-on experience testing web applications, APIs, and cloud-hosted services using proxy tools (e.g. Burp Suite) and knowledge of common security flaws (OWASP) and mitigations.
• Experience performing security design reviews at the architecture level.
• Experience securing AI/LLM-enabled applications, including prompt injection and data leakage concerns.
• Proficiency with at least one threat modeling method (STRIDE, PASTA, attack trees).
• Experience with SAST, DAST, and SCA tools and integrating them into CI/CD pipelines.
• Proficiency in Python, Go, or JavaScript for security tooling and automation.
• Solid understanding of TCP/IP, HTTP/S, OAuth/OIDC, and cryptography fundamentals.
• Ability to collaborate with software teams and product managers.
• Excellent written and verbal communication skills.

Responsibilities

• Embed security into the SDLC through threat modeling, design reviews, security requirements, and secure coding reviews with product and development teams.
• Plan and conduct application security assessments and penetration tests of web applications, APIs, and cloud-hosted services, documenting findings with risk ratings and remediation guidance.
• Threat model and assess AI/LLM-enabled features, including guardrails, permissions, and data access controls.
• Select, integrate, and tune SAST, DAST, SCA, and secrets scanning in CI/CD pipelines.
• Build automation and guardrails that prevent common vulnerabilities.
• Use AI-assisted tooling to scale code review, triage, and remediation with human validation.
• Reproduce, triage, and prioritize vulnerabilities with developers through remediation.
• Communicate risk and business impact to teams and leadership.
• Design, implement, and document application security controls, standards, and secure coding guidance.
• Support the vulnerability disclosure program.
• Coach developers on secure design and coding through consulting and training.

Skills

Web security testing

API security

Cloud security

OWASP Top 10

Threat modeling

CI/CD security

Python/Go/JS

Communication

Tools

Burp Suite

Job description

Tempus AI is seeking an Application Security Engineer to weave security into the software development lifecycle, securing AI/LLM-enabled systems and APIs. You will partner with product and engineering teams to perform risk-based security assessments and guide remediation across web apps, cloud services, and automation pipelines.

The role focuses on threat modeling, security reviews, and building secure-by-default patterns, with frequent collaboration across multidisciplinary teams.