Application Security Engineer: AI/LLM & Cloud Security

VulnU; Chicago (IL); Sur place; USD 85 000 - 130 000; Plein temps

Résumé du poste

Tempus in Chicago is seeking an Application Security Engineer to secure software from design to release and embed security into the SDLC. You will partner with product and engineering teams to assess applications and APIs as attackers would, including AI-powered features and guardrails.

The role requires hands-on testing of web apps, APIs, and cloud services, knowledge of OWASP Top 10, and experience with security tooling like Burp Suite.

Qualifications

• 3–5 years in application security or security-focused software engineering.
• Hands-on testing of web applications, APIs, and cloud-hosted services using proxying tools like Burp Suite.
• Experience with AI/LLM security, including prompt injection and data handling concerns.
• Proficiency in Python, Go, or JavaScript for security tooling and automation.
• Solid understanding of OAuth/OIDC, TLS, cryptography fundamentals.

Responsabilités

• Embed security into the SDLC via threat modeling, design reviews, and secure coding guidance.
• Plan and conduct application security assessments and penetration tests of web apps, APIs, and cloud services.
• Assess AI/LLM-enabled features, including guardrails, access controls, and adversarial testing.
• Select and tune SAST, DAST, SCA, and secrets scanning in CI/CD pipelines.
• Communicate risk and remediation recommendations to developers and leadership.

Connaissances

Web app security

API security

Threat modeling

Security tooling & automation

Communication skills

Outils

Burp Suite

Docker

Kubernetes

CI/CD integration

AWS/GCP

Description du poste

Tempus in Chicago is seeking an Application Security Engineer to secure software from design to release and embed security into the SDLC. You will partner with product and engineering teams to assess applications and APIs as attackers would, including AI-powered features and guardrails.

The role requires hands-on testing of web apps, APIs, and cloud services, knowledge of OWASP Top 10, and experience with security tooling like Burp Suite.