Application Security Engineer
Core
Secure Tempus' software and AI/LLM systems handling sensitive clinical and genomic data by embedding security into the SDLC and conducting penetration tests.
Role type
Application Security Engineer (AI/LLM focus)
Builds
Secure-by-default patterns, automation, and guardrails for AI/LLM-enabled features
Domain
Healthcare / Precision Medicine / AI Security
Deliverable
production ML models
Required skills
Application security, penetration testing, threat modeling, SAST/DAST/SCA integration, Python/Go/JavaScript, network protocols, authentication/authorization, cryptography, AI/LLM security (prompt injection, guardrails)
Preferred skills
AI red teaming, container orchestration (Docker/K8s), cloud security (GCP/AWS), HIPAA compliance, bug bounty experience
Technologies
Burp Suite, OWASP Top 10, STRIDE/PASTA, CI/CD pipelines, Python, Go, JavaScript, Docker, Kubernetes, GCP, AWS
Responsibilities
Embed security into SDLC via threat modeling and code reviews; conduct security assessments and penetration tests; assess AI/LLM features including adversarial prompt testing; integrate security tools into CI/CD; build automation and guardrails; triage and remediate vulnerabilities; coach developers on secure coding; run vulnerability disclosure program.
Seniority
Mid-level, hands-on IC
