Tempus AI
Application Security Engineer
Chicago · Mid
Stay score
odds of building a lasting career here
Sponsors, but it's cap-subject — you still face the weighted lottery (~30% per draw at Level II). Good if you win; have a cap-exempt backup on your list.
Lottery odds assume a STEM candidate.
Personalize to your clock →Employer immigration record
from this employer's Department of Labor filings
Green-card filing pattern in this occupation
Files H-1B transfers
Sourced from Department of Labor LCA, PERM and prevailing-wage disclosure data. Employer matching is by name, so figures may be split across an employer's legal entities. Absence of a filing means none appears in our copy of the data, not that none exists.
Community outcomes
No reports yet — be the first to help the next applicant.
About the role
- The applications you secure handle sensitive clinical and genomic data and increasingly include AI-powered capabilities, so securing AI and LLM-enabled systems is a core part of the role.
- Threat model and assess AI and LLM-enabled features (agents, RAG pipelines, tool and MCP integrations), including adversarial prompt testing and validation of guardrails, permissions, and data access controls.
- Select, integrate, and tune SAST, DAST, software composition analysis, and secrets scanning in CI/CD pipelines.
Responsibilities
- Embed security into the SDLC through threat modeling, design reviews, security requirements, and security-focused code reviews with product and development teams.
- Plan and conduct application security assessments and penetration tests of web applications, APIs, and cloud-hosted services, and document findings with clear risk ratings and practical remediation guidance.
- Build automation, secure-by-default patterns, and guardrails that prevent whole classes of vulnerabilities.
- Use AI-assisted tooling to scale code review, triage, and remediation, applying human judgment to validate the results.
- Design, implement, and document application security controls, standards, and secure coding guidance.
- Run and support the vulnerability disclosure program.
- Coach developers on secure design and coding through consulting, training, and everyday collaboration.
Requirements
- 3-5 years of experience in application security, penetration testing, or software engineering with a security focus.
- Practical experience with at least one threat modeling method (e.g. STRIDE, PASTA, attack trees).
- Experience with SAST, DAST, and SCA tools and integrating them into CI/CD pipelines.
- Proficiency in Python, Go, or JavaScript for security tooling and automation, and the ability to read and review code.
- Experience with Docker, Kubernetes, GCP or AWS, and infrastructure-as-code scanning
- Excellent written and verbal communication, with the ability to explain complex topics clearly and concisely.
- familiarity with MITRE ATLAS or the NIST AI Risk Management Framework
Compensation
- The expected salary range may vary for other locations.
Benefits
- Passionate about precision medicine and advancing the healthcare industry?
- Experience with HIPAA and healthcare data protection
This listing is sourced directly from Tempus AI's careers page and normalized into a canonical job model.