{"id":2380273,"url":"https://alion.io/job/ambry-genetics-application-security-engineer","title":"Application Security Engineer","company":{"id":20123,"name":"Ambry Genetics","domain":"ambrygen.com","url":"https://alion.io/company/ambry-genetics","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":75,"open_postings":5,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":33,"computed_at":"2026-10-13T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Chicago, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":85000,"max":130000,"currency":"USD","period":"year","gross":null,"usd_annual":130000},"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"Burp Suite","optional":false},{"name":"CI/CD","optional":false},{"name":"JavaScript","optional":false},{"name":"LLM","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"Model Context Protocol","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Python","optional":false},{"name":"RAG","optional":false},{"name":"STRIDE","optional":false},{"name":"TCP/IP","optional":false},{"name":"Threat Modeling","optional":false},{"name":"AI Agents","optional":true},{"name":"AWS","optional":true},{"name":"Docker","optional":true},{"name":"GCP","optional":true},{"name":"HIPAA","optional":true},{"name":"Kubernetes","optional":true},{"name":"NIST AI RMF","optional":true},{"name":"Red Teaming","optional":true}],"status":"live","first_seen_at":"2026-10-12T19:13:08Z","employer_posted_date":"2026-10-12","last_verified_at":"2026-10-13T13:48:27Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Passionate about precision medicine and advancing the healthcare industry?\nRecent advancements in underlying technology have finally made it possible for AI to impact clinical care in a meaningful way. Tempus' proprietary platform connects an entire ecosystem of real-world evidence to deliver real-time, actionable insights to physicians, providing critical information about the right treatments for the right patients, at the right time.\nPassionate about precision medicine and advancing the healthcare industry?\nRecent advancements in underlying technology have finally made it possible for AI to impact clinical care in a meaningful way. Tempus' proprietary platform connects an entire ecosystem of real-world evidence to deliver real-time, actionable insights to physicians, providing critical information about the right treatments for the right patients, at the right time.\nAbout the role:\n As an Application Security Engineer, you will secure how Tempus builds software, from design through release. You will partner with product and engineering teams to build security into the software development lifecycle (SDLC), and you will assess our applications and APIs the way an attacker would, through security assessments and penetration tests. The applications you secure handle sensitive clinical and genomic data and increasingly include AI-powered capabilities, so securing AI and LLM-enabled systems is a core part of the role.\nYou will own well-defined application security problems within your team's scope, with guidance from your lead.\nWhat you'll do\nEmbed security into the SDLC through threat modeling, design reviews, security requirements, and security-focused code reviews with product and development teams.\nPlan and conduct application security assessments and penetration tests of web applications, APIs, and cloud-hosted services, and document findings with clear risk ratings and practical remediation guidance.\nThreat model and assess AI and LLM-enabled features (agents, RAG pipelines, tool and MCP integrations), including adversarial prompt testing and validation of guardrails, permissions, and data access controls.\nSelect, integrate, and tune SAST, DAST, software composition analysis, and secrets scanning in CI/CD pipelines.\nBuild automation, secure-by-default patterns, and guardrails that prevent whole classes of vulnerabilities.\nUse AI-assisted tooling to scale code review, triage, and remediation, applying human judgment to validate the results.\nReproduce, triage, and prioritize application security vulnerabilities, and work with developers through to remediation.\nCommunicate the nature, severity, and business risk of security issues to development teams and leadership.\nDesign, implement, and document application security controls, standards, and secure coding guidance.\nRun and support the vulnerability disclosure program.\nCoach developers on secure design and coding through consulting, training, and everyday collaboration.\nWhat you'll bring\n3-5 years of experience in application security, penetration testing, or software engineering with a security focus.\nHands-on experience testing web applications, APIs, and cloud-hosted services, using proxying and penetration testing tools (e.g. Burp Suite), and strong command of common security flaws and mitigations (e.g. OWASP Top 10).\nExperience performing security design reviews at the architecture level\nWorking experience securing AI and LLM-enabled applications: how they are designed and how they fail, including prompt injection, data leakage, excessive agency, and insecure output handling (e.g. OWASP Top 10 for LLM Applications).\nPractical experience with at least one threat modeling method (e.g. STRIDE, PASTA, attack trees).\nExperience with SAST, DAST, and SCA tools and integrating them into CI/CD pipelines.\nProficiency in Python, Go, or JavaScript for security tooling and automation, and the ability to read and review code.\nSolid understanding of network and web protocols (TCP/IP, HTTP/S), authentication and authorization (e.g. OAuth/OIDC), and cryptography fundamentals.\nAble to work well with software development teams and Product Managers.\nExcellent written and verbal communication, with the ability to explain complex topics clearly and concisely.\nBonus points for:\nHands-on AI red teaming or security testing of agentic or RAG systems; familiarity with MITRE ATLAS or the NIST AI Risk Management Framework\nExperience with Docker, Kubernetes, GCP or AWS, and infrastructure-as-code scanning\nBug bounty or vulnerability disclosure program experience\nExperience with HIPAA and healthcare data protection\nAn interest in working in biotech, genomics, and precision medicine\nCertifications such as GWAPT, OSCP, CSSLP, CISSP, or ISC2 CC (Certified in Cybersecurity)\nCHI: $85,000-$130,000\nThe expected salary range may vary for other locations. Actual salary may vary based on qualifications and experience. Tempus offers a full range of benefits, which may include incentive compensation, restricted stock units, medical and other benefits depending on the position.\nWe are an equal opportunity employer. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.","description_format":"text","description_chars":5290,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Restricted stock units"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Genomics & Genetic Testing","Medical Laboratories"],"lifecycle":[{"event":"open","at":"2026-10-12T19:13:08Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 3","filings_12m":3,"filings_prev_12m":4,"green_card_filings_12m":0,"median_offered_wage_usd":157500,"route":null,"cap_exempt":false,"checked_at":"2026-10-03T21:08:04+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":33,"reasons":["conf:6","win:early"],"computed_at":"2026-10-13T05:45:00Z"},"pay":{"stated_usd_annual":130000,"is_top_pay":true},"html_url":"https://alion.io/job/ambry-genetics-application-security-engineer","json_url":"https://alion.io/job/ambry-genetics-application-security-engineer.json","meta":{"generated_at":"2026-10-13T15:58:29Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"assistant_verified","counted_by":"address","units_charged":1,"used_today":3397,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":20123},"rest":"https://alion.io/mcp/rest/get_company?id=20123"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fambry-genetics-application-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fambry-genetics-application-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fambry-genetics-application-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ambry-genetics-application-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fambry-genetics-application-security-engineer"}]}