# Application Security Engineer — Secure Mission Systems at Rackner

> Remote · region unclear · Unspecified · Security · open. Source: https://alderhq.app/jobs/greenhouse%3Arackner%3A4717785005 (read 2026-11-07).

## Facts (observed)

- Company: [Rackner](https://alderhq.app/companies/rackner)
- Location text: Remote
- Where it can be done from (inferred): Remote · region unclear (evidence: "Remote, region not stated")
- Posted: 2026-07-23 (107 days ago)
- First seen by alder: 2026-11-02 · last verified: 2026-11-04
- Reposted: 0 times · edited: 0 times
- Apply on the employer's site: https://job-boards.greenhouse.io/rackner/jobs/4717785005
- Skills listed (inferred): Kubernetes

## Pay and sponsorship

- Posted pay: not posted

## Description (the employer's text)

### Application Security Engineer — Secure Mission Systems

Location: Mainly remote, with onsite work in Laurel, Maryland, typically one day approximately every six weeks for team-wide sprint planning

Clearance: Active final DoD Secret clearance required

This position supports a pending contract opportunity and is contingent upon contract award, with an anticipated start in November 2026.

### Build Security into Mission-Critical Software

At Rackner, you will help strengthen secure software supporting high-impact Department of Defense planning and decision-support missions.

This is a hands-on application-security role where you can influence how security is built into software from development through release. You will work closely with software engineers, AI/ML engineers, platform teams, DevSecOps professionals, and customer technical leads to identify meaningful risks, support vulnerability remediation, and strengthen secure-development practices.

Your work will go beyond running scanners or delivering reports. You will help teams understand security findings, separate actionable risks from false positives, verify fixes, improve software supply-chain security, and deliver resilient software with greater confidence.

### You will

- Integrate application-security testing throughout the software-development lifecycle.
- Conduct and support static application-security testing using Fortify.
- Conduct and support dynamic application-security testing using OWASP ZAP.
- Support software-composition analysis and software supply-chain security using JFrog Xray.
- Review and triage security findings, identify actionable vulnerabilities, and distinguish meaningful risks from false positives.
- Work directly with software engineers to understand root causes, support remediation, and verify completed fixes.
- Integrate automated security scanning into secure CI/CD and GitLab-based development workflows.
- Strengthen dependency-management and software supply-chain controls throughout development and delivery.
- Support application security within environments using GitLab, Artifactory, OpenShift, and Kubernetes.
- Contribute to technical reviews, code reviews, software testing, and security-remediation activities.
- Produce clear vulnerability findings, remediation reports, code-review observations, and technical documentation.
- Support verification that software meets applicable functional, coding, and security requirements before release.
- Collaborate with software, AI/ML, platform, DevSecOps, and customer technical teams.
### What You’ll Bring

- Bachelor’s degree in Cybersecurity.
- At least six years of experience involving cyber resilience, SAST, DAST, and software-vulnerability remediation.
- Hands-on experience with Fortify, JFrog Xray, and OWASP ZAP.
- Identifying, evaluating, triaging, and supporting remediation of application-security vulnerabilities.
- Working directly with software-development teams to resolve security findings.
- Experience with software supply-chain security, dependency risk, or software-composition analysis.
- Understanding of secure software-development lifecycle practices.
- Integrating automated security scanning into software-development or CI/CD workflows.
- Ability to clearly document technical findings and communicate them to developers and technical stakeholders.
### Experience That Can Strengthen Your Fit

Experience with several of the following can improve alignment:

- GitLab-based development and CI/CD workflows.
- Artifactory or similar artifact-management platforms.
- OpenShift, Kubernetes, and containerized application environments.
- Additional SAST, DAST, dependency-scanning, or software-composition-analysis tools.
- Secure-code review and remediation verification.
- Application-security testing in disconnected, restricted, or customer-managed environments.
- Supporting classified, defense, aerospace, government, or other regulated software environments.
- Collaboration across application security, software engineering, platform, DevSecOps, and AI/ML teams.
You do not need equal depth in every area, but your background should include direct experience with the named application-security tools and workflows.

---
Data: alder (https://alderhq.app). Cite https://alderhq.app/jobs/greenhouse%3Arackner%3A4717785005 and the date you read it. Observed facts come from the employer's own listing; location reach, level, family and skills are inferences.