Remote Application Security Engineer – DoD Mission Systems

Rackner; United States; Hybrid; USD 130,000 - 170,000; Full time

Benefits offered by this job

Competitive compensation

Company-supported certifications

401(k) with 100% company match up to 6

Medical, dental, vision, life, and(dis

Paid time off and holidays

Remote-work support and home-office設備

Job summary

Rackner is seeking an Applications Security Engineer to embed security into mission‐critical software for DoD programs. The role includes hands‑on testing, vulnerability remediation, and supply‑chain security across development teams.

Remote work is primarily supported with on‑site collaboration in Laurel, MD roughly every six weeks. The candidate will work with engineers, AI/ML teams, DevSecOps, and customer technical leads to drive secure development, remediation verification, and risk

Qualifications

• Bachelor’s degree in Cybersecurity.
• At least six years of experience involving cyber resilience, SAST, DAST and remediation.
• Hands-on experience with Fortify, JFrog Xray, and OWASP ZAP.
• Experience with software supply‑chain security, dependency risk, or software‑composition analysis.
• Understanding of secure software‑development lifecycle practices.
• Integrating automated security scanning into CI/CD workflows.
• Ability to document technical findings clearly and communicate to developers.

Responsibilities

• Integrate application‑security testing throughout the software‑development lifecycle.
• Conduct and support static application‑security testing using Fortify.
• Conduct and support dynamic application‑security testing using OWASP ZAP.
• Support software‑composition analysis and software supply‑chain security using JFrog Xray.
• Review and triage security findings and identify actionable vulnerabilities.
• Work with engineers to understand root causes, support remediation, and verify fixes.
• Integrate automated security scanning into secure CI/CD and GitLab workflows.
• Strengthen dependency‑management and supply‑chain controls.
• Contribute to technical reviews, code reviews, and security remediation activities.
• Produce vulnerability findings and remediation reports and documentation.
• Verify that software meets functional, coding, and security requirements before release.
• Collaborate across software, AI/ML, platform, DevSecOps, and customer teams.

Skills

Cybersecurity

SAST

DAST

Vulnerability remediation

Fortify

JFrog Xray

OWASP ZAP

CI/CD security

Secure SDLC

Documentation

Collaboration

Education

Bachelor’s degree in Cybersecurity

Tools

Fortify

JFrog Xray

OWASP ZAP

Job description

Rackner is seeking an Applications Security Engineer to embed security into mission‐critical software for DoD programs. The role includes hands‑on testing, vulnerability remediation, and supply‑chain security across development teams.

Remote work is primarily supported with on‑site collaboration in Laurel, MD roughly every six weeks. The candidate will work with engineers, AI/ML teams, DevSecOps, and customer technical leads to drive secure development, remediation verification, and risk