Application Security Engineer
About The Company Rackner is a leading provider of advanced technology solutions supporting critical defense and public-sector missions. With a proven track record of delivering over $30 million in recent federal awards, the company specializes in developing secure, resilient software systems that underpin high-impact Department of Defense planning, decision support, and operational activities. Committed to innovation and excellence, Rackner fosters a collaborative environment where technical expertise, integrity, and mission focus drive success. The organization values continuous professional growth and offers a dynamic workplace that encourages employees to contribute to national security objectives through cutting-edge technology and secure software practices. About The Role The Application Security Engineer at Rackner is a vital role dedicated to integrating security into mission-critical software development processes. This position is remote, based in the U.S., with periodic onsite visits to Laurel, Maryland, approximately every six weeks. The role requires an active final DoD Secret clearance and is contingent upon contract award and customer approval, with an anticipated start date in November 2026. As an Application Security Engineer, you will work closely with software engineers, AI/ML teams, platform specialists, and customer technical leads to embed security best practices throughout the software lifecycle. Your hands-on responsibilities will include conducting static and dynamic application security testing, supporting automated security scans, analyzing vulnerabilities, and guiding remediation efforts. You will play a key role in strengthening software supply-chain security and ensuring compliance with security standards, ultimately delivering resilient, secure software solutions that meet mission-critical requirements.
Qualifications
Minimum of six years of experience in cyber resilience, application security testing, and vulnerability remediation. Bachelor’s degree in Cybersecurity or related field. Hands-on experience with static application security testing (SAST) and dynamic application security testing (DAST) tools. Proficiency with automated security scanning tools such as Fortify, X-Ray, OWASP ZAP, or comparable solutions. Experience working directly with software development teams to improve secure delivery practices. Strong understanding of secure software development lifecycle (SDLC) and software supply-chain security. Ability to clearly communicate technical security findings to developers and technical stakeholders. Experience with CI/CD pipelines, GitLab, Artifactory, and containerized environments like OpenShift and Kubernetes. Knowledge of secure coding practices and remediation verification. Experience supporting classified, defense, or highly regulated software environments is preferred.
Responsibilities
Conduct and support static and dynamic application security testing to identify vulnerabilities early in the development process. Utilize and support automated security scanning tools such as Fortify, X-Ray, and OWASP ZAP to streamline security assessments. Review scan findings, analyze vulnerabilities, and distinguish between meaningful risks and false positives. Collaborate with software engineers to understand root causes of vulnerabilities, support remediation efforts, and verify fixes. Integrate security testing practices into CI/CD workflows, ensuring security is embedded in development pipelines. Enhance software supply-chain security throughout the development and delivery lifecycle. Apply secure software-development and cyber-resilience best practices within containerized environments like OpenShift and Kubernetes. Participate in technical reviews, code reviews, and security remediation documentation to ensure compliance with security standards. Assist teams in meeting functional, coding, and security requirements prior to software release.
Benefits
Competitive compensation package. Company-supported certifications aligned with current and future program needs. 401(k) plan with 100% company match up to 6% of salary. Comprehensive medical, dental, vision, life, and disability insurance coverage. Paid time off and company-recognized holidays. Remote work support including home-office equipment provision. Reimbursement for fitness and wellness activities. Weekly pay schedule ensuring consistent compensation. Opportunities for professional development and career advancement within a mission-focused environment. Equal Opportunity Rackner is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, disability, or protected veteran status. We promote a workplace free from discrimination and harassment, fostering a culture of respect and collaboration.