Application Security Engineer

As an Application Security Engineer, you will secure how Tempus builds software, from design through release. You will partner with product and engineering teams to build security into the software development lifecycle (SDLC), and you will assess our applications and APIs the way an attacker would, through security assessments and penetration tests.

What You Will Do

Embed security into the SDLC through threat modeling, design reviews, security requirements, and security-focused code reviews with product and development teams. Plan and conduct application security assessments and penetration tests of web applications, APIs, and cloud-hosted services, and document findings with clear risk ratings and practical remediation guidance.

Why It Might Be a Fit

You will own well-defined application security problems within your team's scope, with guidance from your lead. You will communicate the nature, severity, and business risk of security issues to development teams and leadership.

Requirements

• 3-5 years of experience in application security, penetration testing, or software engineering with a security focus
• Hands-on experience testing web applications, APIs, and cloud-hosted services
• Strong command of common security flaws and mitigations (e.g. OWASP Top 10)
• Experience performing security design reviews at the architecture level
• Working experience securing AI and LLM-enabled applications
• Practical experience with at least one threat modeling method (e.g. STRIDE, PASTA, attack trees)
• Experience with SAST, DAST, and SCA tools and integrating them into CI/CD pipelines
• Proficiency in Python, Go, or JavaScript for security tooling and automation
• Solid understanding of network and web protocols (TCP/IP, HTTP/S), authentication and authorization (e.g. OAuth/OIDC), and cryptography fundamentals
• Able to work well with software development teams and Product Managers
• Excellent written and verbal communication, with the ability to explain complex topics clearly and concisely

Benefits

• Incentive compensation
• Restricted stock units
• Medical and other benefits