Mission-Critical AppSec Engineer (Remote)

Rackner; Laurel (MD); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

401(k) with match

Medical, dental, vision insurance

Paid time off

Job summary

Rackner seeks an experienced Application Security Engineer to fortify security in mission-critical DoD software. This role collaborates with software, AI/ML, platform, DevSecOps, and customer teams to embed security throughout development and delivery.

You will drive vulnerability remediation, strengthen supply-chain controls, and verify fixes in a high-impact environment. The position emphasizes hands-on testing, dependency management, and clear technical communication.

Qualifications

• Six years of experience in cyber resilience, SAST/DAST and remediation.
• Hands-on with Fortify, JFrog Xray, and OWASP ZAP.
• Ability to identify, triage and remediate application-security vulnerabilities.
• Collaborate with development teams to resolve findings and improve security roots.
• Experience with software-supply chain security and CI/CD workflows.

Responsibilities

• Integrate application-security testing across the software-development lifecycle.
• Conduct static and dynamic testing using Fortify and OWASP ZAP.
• Support software-supply-chain security with JFrog Xray and dependencies.
• Review findings, triage vulnerabilities, and verify fixes with engineers.
• Embed automated security scanning into GitLab-based CI/CD workflows.
• Strengthen dependency-management and secure development practices.
• Document findings clearly for developers and stakeholders.
• Collaborate with software, platform, and customer teams on security remediation.

Skills

SAST

DAST

Fortify

OWASP ZAP

JFrog Xray

Software supply-chain

CI/CD automation

GitLab workflows

Education

Bachelor's degree in Cybersecurity

Tools

GitLab

Artifactory

OpenShift

Kubernetes

Job description

Rackner seeks an experienced Application Security Engineer to fortify security in mission-critical DoD software. This role collaborates with software, AI/ML, platform, DevSecOps, and customer teams to embed security throughout development and delivery.

You will drive vulnerability remediation, strengthen supply-chain controls, and verify fixes in a high-impact environment. The position emphasizes hands-on testing, dependency management, and clear technical communication.