APPLICATION SECURITY ENGINEER — SECURE MISSION SYSTEMS

Rackner

senior

Job description

Application Security Engineer — Secure Mission Systems Location: Remote, U.S. with periodic onsite work in Laurel, Maryland, approximately every six weeks Clearance: Active final DoD Secret clearance required Anticipated Start: November 2026 This position is contingent upon contract award and final customer approval. Build Security into Mission-Critical Software At Rackner, you will help strengthen secure software supporting high-impact Department of Defense planning and decision-support missions. This is a hands-on application-security role where you can influence how security is built into software from development through release. You will work remotely with software engineers, AI/ML engineers, platform teams, and customer technical leads, with periodic onsite sprint-planning sessions in Laurel, Maryland, approximately every six weeks. Your work will go beyond running scanners or delivering reports. You will help teams understand meaningful security risks, resolve vulnerabilities, improve secure-development practices, and deliver resilient software with greater confidence. You will: <ul> <li>Conduct and support static and dynamic application-security testing.</li> <li>Use and support automated security scanning with Fortify, X-Ray, OWASP ZAP, and related tools.</li> <li>Review findings, identify actionable vulnerabilities, and help distinguish meaningful risks from false positives.</li> <li>Work with software engineers to understand root causes, support remediation, and verify that fixes address identified vulnerabilities.</li> <li>Help integrate security testing into secure CI/CD and Git-based development workflows.</li> <li>Strengthen software supply-chain security throughout the development and delivery process.</li> <li>Apply secure software-development and cyber-resilience practices in an environment using GitLab, Artifactory, OpenShift, and Kubernetes.</li> <li>Contribute to technical reviews, code-review findings, security-remediation reports, and software testing.</li> <li>Help ensure software meets applicable functional, coding, and security requirements before release.</li> </ul> What You’ll Bring <ul> <li>At least six years of experience involving cyber resilience, SAST, DAST, and software-vulnerability remediation.</li> <li>Bachelor’s degree in Cybersecurity.</li> <li>Hands-on experience identifying, evaluating, and helping resolve application-security vulnerabilities.</li> <li>Experience working directly with software-development teams to improve secure delivery.</li> <li>Understanding of secure software-development lifecycle practices and software supply-chain security.</li> <li>Ability to explain technical security findings clearly to developers and technical stakeholders.</li> </ul> Experience That Can Strengthen Your Fit <ul> <li>Fortify, X-Ray, OWASP ZAP, or comparable SAST, DAST, dependency, or artifact-scanning tools.</li> <li>Integrating automated security checks into CI/CD workflows.</li> <li>GitLab, Artifactory, or similar development and artifact-management environments.</li> <li>OpenShift, Kubernetes, or other containerized application environments.</li> <li>Secure-code review and remediation verification.</li> <li>Supporting classified, defense, or other highly regulated software environments.</li> <li>Collaborating across application-security, software-engineering, platform, and AI/ML teams.</li> </ul> Why Rackner At Rackner, you will have the opportunity to protect technology supporting critical defense and public-sector missions. You will work on more than isolated scan execution or vulnerability reports. This role combines hands-on application-security testing, vulnerability analysis, remediation verification, software supply-chain security, and close collaboration across software, AI/ML, platform, and mission-focused teams. Rackner has delivered more than $30 million in recent federal awards and supports mission-critical work across defense, civilian, and public-sector environments. We are looking for an application-security engineer who can build on that momentum by strengthening secure delivery, helping teams resolve vulnerabilities, and improving confidence in the software reaching mission users. Benefits & Professional Growth <ul> <li>Competitive compensation</li> <li>Company-supported certifications aligned with current and future program work</li> <li>401(k) with 100% company match up to 6%</li> <li>Medical, dental, vision, life, and disability coverage</li> <li>Paid time off and company holidays</li> <li>Remote-work support and home-office equipment plan</li> <li>Fitness and wellness reimbursement</li> <li>Weekly pay schedule</li> <li>Professional-development and future growth opportunities</li> </ul> Apply If you are an application-security professional who wants broader influence across secure development, automated security testing, vulnerability remediation, and software supply-chain security, we would like to hear from you.