Remote Position
[Remote] Application Security Engineer — Secure Mission Systems
🌍 Remote · United States
💼 Full-time
Note: The job is a remote job and is open to candidates in USA. Rackner is hiring an Application Security Engineer to strengthen secure software supporting Department of Defense planning and decision-support missions. The role integrates security testing across the software-development lifecycle, triages vulnerabilities, supports remediation and verification, and improves software supply-chain security in collaboration with engineering and technical teams. The position is contingent upon contract award.
Responsibilities
- Integrate application-security testing throughout the software-development lifecycle
- Conduct and support static application-security testing using Fortify
- Conduct and support dynamic application-security testing using OWASP ZAP
- Support software-composition analysis and software supply-chain security using JFrog Xray
- Review and triage security findings, identify actionable vulnerabilities, and distinguish meaningful risks from false positives
- Work directly with software engineers to understand root causes, support remediation, and verify completed fixes
- Integrate automated security scanning into secure CI/CD and GitLab-based development workflows
- Strengthen dependency-management and software supply-chain controls throughout development and delivery
- Support application security within environments using GitLab, Artifactory, OpenShift, and Kubernetes
- Contribute to technical reviews, code reviews, software testing, and security-remediation activities
- Produce clear vulnerability findings, remediation reports, code-review observations, and technical documentation
- Support verification that software meets applicable functional, coding, and security requirements before release
- Collaborate with software, AI/ML, platform, DevSecOps, and customer technical teams
Skills
- Active final DoD Secret clearance required
- Bachelor's degree in Cybersecurity
- At least six years of experience involving cyber resilience, SAST, DAST, and software-vulnerability remediation
- Hands-on experience with Fortify, JFrog Xray, and OWASP ZAP
- Identifying, evaluating, triaging, and supporting remediation of application-security vulnerabilities
- Working directly with software-development teams to resolve security findings
- Experience with software supply-chain security, dependency risk, or software-composition analysis
- Understanding of secure software-development lifecycle practices
- Integrating automated security scanning into software-development or CI/CD workflows
- Ability to clearly document technical findings and communicate them to developers and technical stakeholders
- GitLab-based development and CI/CD workflows
- Artifactory or similar artifact-management platforms
- OpenShift, Kubernetes, and containerized application environments
- Additional SAST, DAST, dependency-scanning, or software-composition-analysis tools
- Secure-code review and remediation verification
- Application-security testing in disconnected, restricted, or customer-managed environments
- Supporting classified, defense, aerospace, government, or other regulated software environments
- Collaboration across application security, software engineering, platform, DevSecOps, and AI/ML teams
Benefits
- Company-supported certifications aligned with current and future program work
- 401(k) with 100% company match up to 6%
- Medical, dental, vision, life, and disability coverage
- Paid time off and company holidays
- Mainly remote work, with onsite work in Laurel, Maryland, typically one day approximately every six weeks for team-wide sprint planning
- Home-office equipment plan
- Fitness and wellness reimbursement
- Professional-development and future growth opportunities
Company Overview