Security Engineer for AI-Driven Applications

Ambry Genetics Corporation; Chicago (IL); Presencial; USD 85.000 - 130.000; Jornada completa

Descripción de la vacante

Tempus is seeking an Application Security Engineer to secure software from design to release. You will partner with product and engineering teams to embed security into the SDLC and assess applications and APIs as attackers would, including AI/LLM-enabled systems.

You will own well-defined security problems within your team’s scope, with guidance from your lead, and drive risk-based remediation across web apps, APIs, and cloud services.

Formación

• 3-5 years of experience in application security, penetration testing, or security-focused software engineering.
• Hands-on testing of web apps, APIs, and cloud-hosted services using proxying tools (e.g. Burp Suite) and knowledge of OWASP Top 10.
• Experience performing security design reviews at the architecture level.
• Experience securing AI/LLM-enabled applications, including prompt injection and data leakage concerns.
• Practical experience with at least one threat modeling method (STRIDE, PASTA, attack trees).
• Experience with SAST, DAST, and SCA in CI/CD pipelines.
• Proficiency in Python, Go, or JavaScript for security tooling and automation.
• Solid understanding of TCP/IP, HTTP/S, OAuth/OIDC, and cryptography basics.
• Able to work with software teams and Product Managers.
• Excellent written and verbal communication.

Responsabilidades

• Embed security into the SDLC with threat modeling and design reviews.
• Conduct application security assessments and pen tests of web apps, APIs, and cloud services; document findings with risk ratings.
• Threat model AI/LLM features and validate guardrails and data access controls.
• Integrate SAST, DAST, and SCA into CI/CD pipelines.
• Build secure-by-default patterns and guardrails.
• Use AI-assisted tooling to scale code review and remediation.
• Prioritize vulnerabilities and work with developers to remediate.
• Communicate risk to teams and leadership.
• Design and document application security controls and guidance.
• Run vulnerability disclosure program.
• Coach developers on secure design and coding.

Conocimientos

Experience 3-5y security

Burp Suite

Architecture security reviews

AI/LLM security

Threat modeling

CI/CD security

Python/Go/JS security tooling

Networks & crypto basics

Team collaboration

Clear communication

Security writing & guidance

AI red teaming (bonus)

Docker/Kubernetes/AWS/GCP (bonus)

Vulnerability disclosure (bonus)

HIPAA knowledge (bonus)

GWAPT/OSCP/CSSLP (bonus)

Herramientas

Burp Suite

Docker

Kubernetes

AWS

GCP

IaC scanning

Descripción del empleo

Tempus is seeking an Application Security Engineer to secure software from design to release. You will partner with product and engineering teams to embed security into the SDLC and assess applications and APIs as attackers would, including AI/LLM-enabled systems.

You will own well-defined security problems within your team’s scope, with guidance from your lead, and drive risk-based remediation across web apps, APIs, and cloud services.