Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted today

Application Security Engineer

Tempus AI134 open roles

Where
Chicago
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowApplication Security EngineerTempus AI · Chicago

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Tempus AI's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

9.0% of postings close within 7 days. Measured by our own scanner across the market. Tempus AI postings stay open a median of 32 days.

Share of postings closed within
  1. 1.8%1 day
  2. 3.9%3 days
  3. 9.0%7 days
  4. 15.5%14 days
  5. 34.0%30 days
This job: posted today

Tempus AI median: 32 days open

The posting

Passionate about precision medicine and advancing the healthcare industry?

Recent advancements in underlying technology have finally made it possible for AI to impact clinical care in a meaningful way. Tempus' proprietary platform connects an entire ecosystem of real-world evidence to deliver real-time, actionable insights to physicians, providing critical information about the right treatments for the right patients, at the right time.

Passionate about precision medicine and advancing the healthcare industry?

Recent advancements in underlying technology have finally made it possible for AI to impact clinical care in a meaningful way. Tempus' proprietary platform connects an entire ecosystem of real-world evidence to deliver real-time, actionable insights to physicians, providing critical information about the right treatments for the right patients, at the right time.

About the role: As an Application Security Engineer, you will secure how Tempus builds software, from design through release. You will partner with product and engineering teams to build security into the software development lifecycle (SDLC), and you will assess our applications and APIs the way an attacker would, through security assessments and penetration tests. The applications you secure handle sensitive clinical and genomic data and increasingly include AI-powered capabilities, so securing AI and LLM-enabled systems is a core part of the role.

You will own well-defined application security problems within your team's scope, with guidance from your lead.

What you'll do

  • Embed security into the SDLC through threat modeling, design reviews, security requirements, and security-focused code reviews with product and development teams.
  • Plan and conduct application security assessments and penetration tests of web applications, APIs, and cloud-hosted services, and document findings with clear risk ratings and practical remediation guidance.
  • Threat model and assess AI and LLM-enabled features (agents, RAG pipelines, tool and MCP integrations), including adversarial prompt testing and validation of guardrails, permissions, and data access controls.
  • Select, integrate, and tune SAST, DAST, software composition analysis, and secrets scanning in CI/CD pipelines.
  • Build automation, secure-by-default patterns, and guardrails that prevent whole classes of vulnerabilities.
  • Use AI-assisted tooling to scale code review, triage, and remediation, applying human judgment to validate the results.
  • Reproduce, triage, and prioritize application security vulnerabilities, and work with developers through to remediation.
  • Communicate the nature, severity, and business risk of security issues to development teams and leadership.
  • Design, implement, and document application security controls, standards, and secure coding guidance.
  • Run and support the vulnerability disclosure program.
  • Coach developers on secure design and coding through consulting, training, and everyday collaboration.

What you'll bring

  • 3-5 years of experience in application security, penetration testing, or software engineering with a security focus.
  • Hands-on experience testing web applications, APIs, and cloud-hosted services, using proxying and penetration testing tools (e.g. Burp Suite), and strong command of common security flaws and mitigations (e.g. OWASP Top 10).
  • Experience performing security design reviews at the architecture level
  • Working experience securing AI and LLM-enabled applications: how they are designed and how they fail, including prompt injection, data leakage, excessive agency, and insecure output handling (e.g. OWASP Top 10 for LLM Applications).
  • Practical experience with at least one threat modeling method (e.g. STRIDE, PASTA, attack trees).
  • Experience with SAST, DAST, and SCA tools and integrating them into CI/CD pipelines.
  • Proficiency in Python, Go, or JavaScript for security tooling and automation, and the ability to read and review code.
  • Solid understanding of network and web protocols (TCP/IP, HTTP/S), authentication and authorization (e.g. OAuth/OIDC), and cryptography fundamentals.
  • Able to work well with software development teams and Product Managers.
  • Excellent written and verbal communication, with the ability to explain complex topics clearly and concisely.

Bonus points for:

  • Hands-on AI red teaming or security testing of agentic or RAG systems; familiarity with MITRE ATLAS or the NIST AI Risk Management Framework
  • Experience with Docker, Kubernetes, GCP or AWS, and infrastructure-as-code scanning
  • Bug bounty or vulnerability disclosure program experience
  • Experience with HIPAA and healthcare data protection
  • An interest in working in biotech, genomics, and precision medicine
  • Certifications such as GWAPT, OSCP, CSSLP, CISSP, or ISC2 CC (Certified in Cybersecurity)

CHI: $85,000-$130,000

The expected salary range may vary for other locations. Actual salary may vary based on qualifications and experience. Tempus offers a full range of benefits, which may include incentive compensation, restricted stock units, medical and other benefits depending on the position.

We are an equal opportunity employer. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Tempus AI's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Tempus AI's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Tempus AI's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.