Passionate about precision medicine and advancing the healthcare industry?
Recent advancements in underlying technology have finally made it possible for AI to impact clinical care in a meaningful way. Tempus' proprietary platform connects an entire ecosystem of real-world evidence to deliver real-time, actionable insights to physicians, providing critical information about the right treatments for the right patients, at the right time.
Tempus is seeking a Senior Application Security Engineer with deep expertise in penetration testing to lead efforts in identifying and remediating vulnerabilities across web, mobile, and medical device applications. You will safeguard sensitive healthcare data and ensure the security of our internal systems and software medical device (SaMD) products, supporting our mission to improve patient outcomes through secure-by-design principles.
Key ResponsibilitiesExecute advanced black-box and grey-box penetration tests on web applications, APIs (REST/GraphQL), and internal systems.
Perform deep-dive mobile security assessments on iOS and Android, including reverse engineering and bypassing client-side controls like root detection and certificate pinning.
Lead specialized security testing and threat modeling for FDA-regulated medical device software, ensuring compliance with HIPAA, GDPR, and FDA cybersecurity guidelines.
Develop high-quality technical reports detailing exploit chains and business logic flaws, providing engineering teams with hands-on remediation guidance.
Automate security testing by developing custom tools and scripts in languages such as Python, Go, or PowerShell.
Communicate complex security risks and business impacts to executive leadership and cross-functional stakeholders.
Mentor junior team members and provide security training to development teams to foster a robust culture of security awareness.
5+ years of experience in penetration testing, ideally within healthcare or highly regulated environments.
Expert knowledge of web/API vulnerabilities (OWASP Top 10) and mobile testing frameworks (Frida, Burp Suite, MobSF, Ghidra).
Understanding of medical protocols (DICOM, HL7) and cloud security practices (AWS, Azure, or GCP).
Proficiency in scripting languages (Python, JavaScript/TypeScript, Go) and secure SDLC practices.
Excellent analytical, problem-solving, and interpersonal communication skills.
Offensive Security: OSCP, OSCE, or OSWE.
Mobile Security: eCMAP or GMOB.
General/Regulated: CEH, CSSLP, GPEN, GWAPT, or UL 2900 training.
The expected salary range above is applicable if the role is performed from Illinois and may vary for other locations (California, Colorado, New York). Actual salary may vary based on qualifications and experience. Tempus offers a full range of benefits, which may include incentive compensation, restricted stock units, medical and other benefits depending on the position.
We are an equal opportunity employer. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.
Skills Required
- 5+ years of proven experience in penetration testing
- Strong understanding of security principles, techniques, and technologies
- Experience with security tools and products (e.g., Burp Suite, Snyk, Metasploit, Nmap)
- Familiarity with programming/scripting languages such as Python, JavaScript/TypeScript
- Experience with cloud security (AWS, Azure, GCP) and secure SDLC practices
- Relevant certifications such as OSCP, GPEN, OSCE, GWAPT, CSSLP
What the Team is Saying
Tempus AI Compensation & Benefits Highlights
-
Healthcare Strength — The package includes medical, dental, vision, life and disability coverage, FSA/HSA options, mental health/EAP, and pet insurance. Wellness programs, gym discounts, and commuter benefits complement the core coverage.
-
Parental & Family Support — Paid parental leave and an onsite mother’s room are explicitly highlighted, alongside family medical leave. These offerings extend support for new parents beyond standard medical benefits.
-
Wellbeing & Lifestyle Benefits — On‑site cafeteria meals, stocked snacks, and an on‑site barista in some offices enhance daily convenience. Hybrid/remote options and flexible schedules add meaningful lifestyle flexibility.
Tempus AI Insights
What We Do
We bring together one of the world’s largest libraries of multimodal clinical and molecular data with a robust suite of AI tools to help physicians personalize care in real time, connect patients with therapies and clinical trials, and enable partners to accelerate discovery and development of new treatments. With ~8 million de-identified research records and 350+ petabytes of data, Tempus partners with more than half of U.S. oncologists and the majority of the top 20 global pharma companies. Our teams are pioneering work across oncology, neurology, psychiatry, cardiology, and beyond—transforming how care is delivered and therapies are developed. At Tempus, every role contributes to our mission: to help each patient benefit from the experiences of those who came before. For more information, visit tempus.com.
Why Work With Us
We’re looking for people who can change the world. People who question the status quo and refuse to shy away from tough problems. For builders who are never done building, and the learners who are never done learning. Passionate individuals with undying curiosity who want to take on one of the greatest challenges humanity has ever faced—head on.
Gallery
Tempus AI Offices
Hybrid Workspace
Employees engage in a combination of remote and on-site work.
Most of the team follows a hybrid policy, with some roles allowing for a fully remote arrangement and some roles being onsite only.
