Description
Application Security Engineer — Secure Mission Systems
Location: Mainly remote, with onsite work in Laurel, Maryland, typically one day approximately every six weeks for team-wide sprint planning
Clearance: Active final DoD Secret clearance required
This position supports a pending contract opportunity and is contingent upon contract award, with an anticipated start in November 2026.
Build Security into Mission-Critical Software
At Rackner, you will help strengthen secure software supporting high-impact Department of Defense planning and decision-support missions.
This is a hands-on application-security role where you can influence how security is built into software from development through release. You will work closely with software engineers, AI/ML engineers, platform teams, DevSecOps professionals, and customer technical leads to identify meaningful risks, support vulnerability remediation, and strengthen secure-development practices.
Your work will go beyond running scanners or delivering reports. You will help teams understand security findings, separate actionable risks from false positives, verify fixes, improve software supply-chain security, and deliver resilient software with greater confidence.
You will:
- Integrate application-security testing throughout the software-development lifecycle.
- Conduct and support static application-security testing using Fortify.
- Conduct and support dynamic application-security testing using OWASP ZAP.
- Support software-composition analysis and software supply-chain security using JFrog Xray.
- Review and triage security findings, identify actionable vulnerabilities, and distinguish meaningful risks from false positives.
- Work directly with software engineers to understand root causes, support remediation, and verify completed fixes.
- Integrate automated security scanning into secure CI/CD and GitLab-based development workflows.
- Strengthen dependency-management and software supply-chain controls throughout development and delivery.
- Support application security within environments using GitLab, Artifactory, OpenShift, and Kubernetes.
- Contribute to technical reviews, code reviews, software testing, and security-remediation activities.
- Produce clear vulnerability findings, remediation reports, code-review observations, and technical documentation.
- Support verification that software meets applicable functional, coding, and security requirements before release.
- Collaborate with software, AI/ML, platform, DevSecOps, and customer technical teams.
What You’ll Bring
- Bachelor’s degree in Cybersecurity.
- At least six years of experience involving cyber resilience, SAST, DAST, and software-vulnerability remediation.
- Hands-on experience with Fortify, JFrog Xray, and OWASP ZAP.
- Identifying, evaluating, triaging, and supporting remediation of application-security vulnerabilities.
- Working directly with software-development teams to resolve security findings.
- Experience with software supply-chain security, dependency risk, or software-composition analysis.
- Understanding of secure software-development lifecycle practices.
- Integrating automated security scanning into software-development or CI/CD workflows.
- Ability to clearly document technical findings and communicate them to developers and technical stakeholders.
Experience That Can Strengthen Your Fit
Experience with several of the following can improve alignment:
- GitLab-based development and CI/CD workflows.
- Artifactory or similar artifact-management platforms.
- OpenShift, Kubernetes, and containerized application environments.
- Additional SAST, DAST, dependency-scanning, or software-composition-analysis tools.
- Secure-code review and remediation verification.
- Application-security testing in disconnected, restricted, or customer-managed environments.
- Supporting classified, defense, aerospace, government, or other regulated software environments.
- Collaboration across application security, software engineering, platform, DevSecOps, and AI/ML teams.
You do not need equal depth in every area, but your background should include direct experience with the named application-security tools and workflows.
Why Rackner
At Rackner, you will have the opportunity to protect technology supporting critical defense and public-sector missions.
You will work on more than isolated scan execution or vulnerability reports. This role combines hands-on application-security testing, vulnerability analysis, remediation verification, software supply-chain security, and close collaboration across software, AI/ML, platform, and mission-focused teams.
Rackner has delivered more than $30 million in recent federal awards and supports mission-critical work across defense, civilian, and public-sector environments. We are looking for an application-security engineer who can build on that momentum by strengthening secure delivery, helping teams resolve vulnerabilities, and improving confidence in the software reaching mission users.
Benefits & Professional Growth
- Competitive compensation
- Company-supported certifications aligned with current and future program work
- 401(k) with 100% company match up to 6%
- Medical, dental, vision, life, and disability coverage
- Paid time off and company holidays
- Remote-work support and home-office equipment plan
- Fitness and wellness reimbursement
- Weekly pay schedule
- Professional-development and future growth opportunities
Apply
If you are an application-security professional who wants broader influence across secure development, automated security testing, vulnerability remediation, and software supply-chain security, we would like to hear from you.
Similar jobs
Est. 144,000 USD
Senior Software Engineer — Secure Mission Systems Location: Mainly remote, with onsite work in Laurel, Maryland, typically one day approximately every six weeks for team-wide sprint planningClearance: Active final DoD Se…
Est. 124,000 USD
Backend Software Engineer — Secure Mission Systems Location: Mainly remote, with onsite work in Laurel, Maryland, typically one day every six weeks for team-wide sprint planning. Exact timing may vary based on project ne…
Est. 124,000 USD
Frontend Software Engineer — Secure Mission Systems Location: Mainly remote, with onsite work in Laurel, Maryland, typically one day approximately every six weeks for team-wide sprint planningClearance: Active final DoD…
Est. 144,000 USD
AI/ML Engineer — Generative AI Mission Systems Location: Mainly remote within the United States, with onsite collaboration in Laurel, Maryland, typically one day approximately every six weeks for team-wide sprint plannin…
Est. 124,000 USD
Software/AI developer— R&D Location: United StatesWork Model: RemoteTravel: Approximately 15% for R&D events, technical demos, and collaboration sessionsClearance: U.S. citizenship required. Active Secret clearan…
Est. 140,000 USD
Senior Federal Business Development Executive — Defense Health Location: Remote, United StatesTravel: Up to 40%Employment type: Full-timeRole type: Senior individual contributorClearance: A current security clearance is…
Est. 115,000 USD
Cloud Infrastructure Support Engineer — Active TS Required Location: Charlottesville, VirginiaWork arrangement: Fully onsite at a secure government facilitySchedule: Anticipated 3:00–11:00 p.m., Monday through FridayClea…
Est. 70,000 USD
Business Development Representative — DoD / U.S. Air Force Location: Remote, United States; preference for candidates near Washington, DC, San Antonio, TX, or Boston, MATravel: Up to twice per quarterEmployment type: Ful…
Est. 120,000 USD
Virtual Desktop Infrastructure (VDI) Systems EngineerLocation: Dayton, OHWork Model: Fully onsite at NASICClearance: Active TS/SCI OverviewRackner is seeking a Virtual Desktop Infrastructure Engineer to support the VDI E…
Est. 140,000 USD
Senior Federal Business Development Executive — U.S. Air Force Location: Remote, United StatesTravel: Up to 40%Employment type: Full-timeRole type: Senior individual contributorClearance: A current security clearance is…
Est. 176,000 USD
At Reltio®, an SAP Company, we believe data should fuel your success in the enterprise AI era. Our Context Intelligence Platform turns fragmented data into a trusted, connected context so AI agents and systems can act wi…
Est. 120,000 EUR
We are looking for a DevSecOps and Application Security Lead to join our team and build our application security from scratch. In this role, you will lead the security direction within our department, focusing on integra…
Est. 120,000 USD
Who We Are (video) At JRC, we tackle some of the toughest challenges faced by the Department of Defense (DoD) and other government agencies. Our expertise in engineering innovation and semiconductor technologies allows u…
Est. 175,000 USD
Join our team at Core One! Our mission is to be at the forefront of devising analytical, operational and technical solutions to our Nation's most complex national security challenges. In order to achieve our mission, Cor…
Est. 165,000 USD
Synack’s Penetration Testing as a Service platform manages customers’ attack surfaces by discovering new assets, pentesting for critical vulnerabilities and gaining visibility into the root causes of security risks. We a…
Est. 152,500 USD
At Beyond Finance, we've made it our mission to help everyday Americans escape the endless cycle of crippling debt and step into a brighter financial future. Through compassionate, individualized care, a culture focused…
Est. 173,500 USD
About SecurityScorecard: SecurityScorecard is the global leader in cybersecurity ratings, with over 12 million companies continuously rated, operating in 64 countries. Founded in 2013 by security and risk experts Dr. Ale…
About SecurityScorecard: SecurityScorecard is the global leader in cybersecurity ratings, with over 12 million companies continuously rated, operating in 64 countries. Founded in 2013 by security and risk experts Dr. Ale…
Est. 144,000 USD
CHAOS Industries is redefining modern defense with a multi-product portfolio that gives the ultimate advantage—domain dominance. The company's products are powered by Coherent Distributed Networks (CDN™), empowering warf…
Est. 144,000 USD
CHAOS Industries is redefining modern defense with a multi-product portfolio that gives the ultimate advantage—domain dominance. The company's products are powered by Coherent Distributed Networks (CDN™), empowering warf…
About SecurityScorecard: SecurityScorecard is the global leader in cybersecurity ratings, with over 12 million companies continuously rated, operating in 64 countries. Founded in 2013 by security and risk experts Dr. Ale…
Est. 204,500 USD
Clarity Innovations is a trusted national security partner, dedicated to safeguarding our nation’s interests and delivering innovative solutions that empower the Intelligence Community (IC) and Department of Defense (DoD…
Est. 173,500 USD
About SecurityScorecard: SecurityScorecard is the global leader in cybersecurity ratings, with over 12 million companies continuously rated, operating in 64 countries. Founded in 2013 by security and risk experts Dr. Ale…
Est. 144,000 USD
Electrosoft Services, LLC is an award-winning company that provides comprehensive technology-based solutions and services to federal customers. While cybersecurity is our specialty, we also focus on ICAM, Zero Trust, dig…
Est. 144,000 USD
CHAOS Industries is redefining modern defense with a multi-product portfolio that gives the ultimate advantage—domain dominance. The company's products are powered by Coherent Distributed Networks (CDN™), empowering warf…
Est. 60,000 USD
Title: Computer Science Intern Location: College Park, Maryland (across the street from campus) Who We Are: Rackner is a software consultancy that builds cloud-native solutions for startups, enterprises, and the public s…
About SecurityScorecard: SecurityScorecard is the global leader in cybersecurity ratings, with over 12 million companies continuously rated, operating in 64 countries. Founded in 2013 by security and risk experts Dr. Ale…
Est. 120,000 USD
Electrosoft Services, LLC is an award-winning company that provides comprehensive technology-based solutions and services to federal customers. While cybersecurity is our specialty, we also focus on ICAM, Zero Trust, dig…
Est. 130,000 USD
About Us AGE Solutions is a premier technology and professional services company, providing in-depth consulting, advanced technology solutions, and essential services throughout the U.S. government, defense, and intellig…
Est. 141,000 USD
This is a U.S. based position. All of the programs we support require U.S. citizenship to be eligible for employment. All work must be conducted within the continental U.S.Who we are: Raft (https://TeamRaft.com) is a cus…