Application Security Engineer
Description For Application Security Engineer
Tempus is at the forefront of revolutionizing healthcare through AI and precision medicine. Their proprietary platform connects real-world evidence to provide physicians with actionable insights for personalized patient care.
As an Application Security Engineer at Tempus, you'll play a crucial role in ensuring the security of their healthcare technology platform. You'll be responsible for implementing security best practices throughout the software development lifecycle, from threat modeling to vulnerability assessment and remediation.
The role combines technical security expertise with collaborative teamwork, requiring you to work closely with product and development teams. You'll conduct security-focused code reviews, implement security controls, and develop automated tooling to prevent security issues. Your communication skills will be essential in articulating complex security concerns and solutions to various stakeholders.
This position offers an opportunity to impact healthcare technology directly, working with modern tools and technologies including Python, JavaScript, and Go. The company provides competitive compensation ($100,000 - $150,000) and the flexibility of hybrid work arrangements.
Ideal candidates will bring a strong foundation in application security, familiarity with common security tools and frameworks, and an understanding of network protocols. Experience with Docker, GCP, or certifications like ISC2 CC would be advantageous. This role is perfect for security professionals who are passionate about protecting sensitive healthcare data and contributing to the advancement of precision medicine.
Working at Tempus means joining a mission-driven company that values diversity and equal opportunity, offering a chance to make a meaningful impact on healthcare through technology. The role provides a unique combination of technical challenges, professional growth, and the satisfaction of contributing to improved patient care through secure healthcare technology solutions.
Responsibilities For Application Security Engineer
- Support and consult with product and development teams in application security, including threat modeling and security reviews
- Perform security-focused code reviews
- Design and implement software application security controls
- Develop and maintain documentation of application security controls
- Develop security processes and automated tooling to prevent security issues
- Perform application scanning and testing
- Reproduce and triage application security vulnerabilities
- Communicate security concerns to the development team
- Support designing technical solutions for security weaknesses
- Maintain software application security policies and procedures
- Support the vulnerability disclosure program
Requirements For Application Security Engineer
- Ability to work well with software development teams and Product Managers
- Experience identifying security issues through code review
- Excellent professional communication skills (written and verbal)
- Familiarity with security libraries and tools
- Knowledge of common security flaws and OWASP Top 10
- Basic development or scripting experience (Python, JavaScript, and/or Go preferred)
- Basic understanding of network and web protocols (TCP/IP, UDP, HTTP, HTTPS)
Benefits For Application Security Engineer
- Full range of benefits
- Incentive compensation
- Restricted stock units
- Medical benefits
