Application Security Engineer — Secure Mission Systems

At Rackner, you will help strengthen secure software supporting high-impact Department of Defense planning and decision-support missions.

This is a hands-on application-security role where you can influence how security is built into software from development through release. You will work remotely with software engineers, AI/ML engineers, platform teams, and customer technical leads, with periodic onsite sprint-planning sessions in Laurel, Maryland, approximately every six weeks.

Your work will go beyond running scanners or delivering reports. You will help teams understand meaningful security risks, resolve vulnerabilities, improve secure-development practices, and deliver resilient software with greater confidence.

You will:

• Conduct and support static and dynamic application-security testing.
• Use and support automated security scanning with Fortify, X-Ray, OWASP ZAP, and related tools.
• Review findings, identify actionable vulnerabilities, and help distinguish meaningful risks from false positives.
• Work with software engineers to understand root causes, support remediation, and verify that fixes address identified vulnerabilities.
• Help integrate security testing into secure CI/CD and Git-based development workflows.
• Strengthen software supply-chain security throughout the development and delivery process.
• Apply secure software-development and cyber-resilience practices in an environment using GitLab, Artifactory, OpenShift, and Kubernetes.
• Contribute to technical reviews, code-review findings, security-remediation reports, and software testing.
• Help ensure software meets applicable functional, coding, and security requirements before release.

• At least six years of experience involving cyber resilience, SAST, DAST, and software-vulnerability remediation.
• Bachelor’s degree in Cybersecurity.
• Hands-on experience identifying, evaluating, and helping resolve application-security vulnerabilities.
• Experience working directly with software-development teams to improve secure delivery.
• Understanding of secure software-development lifecycle practices and software supply-chain security.
• Ability to explain technical security findings clearly to developers and technical stakeholders.

• Fortify, X-Ray, OWASP ZAP, or comparable SAST, DAST, dependency, or artifact-scanning tools.
• Integrating automated security checks into CI/CD workflows.
• GitLab, Artifactory, or similar development and artifact-management environments.
• OpenShift, Kubernetes, or other containerized application environments.
• Secure-code review and remediation verification.
• Supporting classified, defense, or other highly regulated software environments.
• Collaborating across application-security, software-engineering, platform, and AI/ML teams.

At Rackner, you will have the opportunity to protect technology supporting critical defense and public-sector missions.

You will work on more than isolated scan execution or vulnerability reports. This role combines hands-on application-security testing, vulnerability analysis, remediation verification, software supply-chain security, and close collaboration across software, AI/ML, platform, and mission-focused teams.

Rackner has delivered more than $30 million in recent federal awards and supports mission-critical work across defense, civilian, and public-sector environments. We are looking for an application-security engineer who can build on that momentum by strengthening secure delivery, helping teams resolve vulnerabilities, and improving confidence in the software reaching mission users.

If you are an application-security professional who wants broader influence across secure development, automated security testing, vulnerability remediation, and software supply-chain security, we would like to hear from you.