Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 108 days ago

Application Security Engineer — Secure Mission Systems

Rackner17 open roles

Where
Remote
Work mode
Remote
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowApplication Security Engineer — Secure Mission SystemsRackner · Remote

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Rackner's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.6% of postings close within 7 days. Measured by our own scanner across the market. Rackner postings stay open a median of 31 days.

Share of postings closed within
  1. 2.3%1 day
  2. 4.7%3 days
  3. 13.6%7 days
  4. 21.9%14 days
  5. 36.9%30 days
  6. 59.0%60 days
This job: posted 108 days ago

Rackner median: 31 days open

The posting

Application Security Engineer — Secure Mission Systems

Location: Mainly remote, with onsite work in Laurel, Maryland, typically one day approximately every six weeks for team-wide sprint planning Clearance: Active final DoD Secret clearance required

This position supports a pending contract opportunity and is contingent upon contract award, with an anticipated start in November 2026.

Build Security into Mission-Critical Software

At Rackner, you will help strengthen secure software supporting high-impact Department of Defense planning and decision-support missions.

This is a hands-on application-security role where you can influence how security is built into software from development through release. You will work closely with software engineers, AI/ML engineers, platform teams, DevSecOps professionals, and customer technical leads to identify meaningful risks, support vulnerability remediation, and strengthen secure-development practices.

Your work will go beyond running scanners or delivering reports. You will help teams understand security findings, separate actionable risks from false positives, verify fixes, improve software supply-chain security, and deliver resilient software with greater confidence.

You will:

  • Integrate application-security testing throughout the software-development lifecycle.
  • Conduct and support static application-security testing using Fortify.
  • Conduct and support dynamic application-security testing using OWASP ZAP.
  • Support software-composition analysis and software supply-chain security using JFrog Xray.
  • Review and triage security findings, identify actionable vulnerabilities, and distinguish meaningful risks from false positives.
  • Work directly with software engineers to understand root causes, support remediation, and verify completed fixes.
  • Integrate automated security scanning into secure CI/CD and GitLab-based development workflows.
  • Strengthen dependency-management and software supply-chain controls throughout development and delivery.
  • Support application security within environments using GitLab, Artifactory, OpenShift, and Kubernetes.
  • Contribute to technical reviews, code reviews, software testing, and security-remediation activities.
  • Produce clear vulnerability findings, remediation reports, code-review observations, and technical documentation.
  • Support verification that software meets applicable functional, coding, and security requirements before release.
  • Collaborate with software, AI/ML, platform, DevSecOps, and customer technical teams.

What You’ll Bring

  • Bachelor’s degree in Cybersecurity.
  • At least six years of experience involving cyber resilience, SAST, DAST, and software-vulnerability remediation.
  • Hands-on experience with Fortify, JFrog Xray, and OWASP ZAP.
  • Identifying, evaluating, triaging, and supporting remediation of application-security vulnerabilities.
  • Working directly with software-development teams to resolve security findings.
  • Experience with software supply-chain security, dependency risk, or software-composition analysis.
  • Understanding of secure software-development lifecycle practices.
  • Integrating automated security scanning into software-development or CI/CD workflows.
  • Ability to clearly document technical findings and communicate them to developers and technical stakeholders.

Experience That Can Strengthen Your Fit

Experience with several of the following can improve alignment:

  • GitLab-based development and CI/CD workflows.
  • Artifactory or similar artifact-management platforms.
  • OpenShift, Kubernetes, and containerized application environments.
  • Additional SAST, DAST, dependency-scanning, or software-composition-analysis tools.
  • Secure-code review and remediation verification.
  • Application-security testing in disconnected, restricted, or customer-managed environments.
  • Supporting classified, defense, aerospace, government, or other regulated software environments.
  • Collaboration across application security, software engineering, platform, DevSecOps, and AI/ML teams.

You do not need equal depth in every area, but your background should include direct experience with the named application-security tools and workflows.

Why Rackner

At Rackner, you will have the opportunity to protect technology supporting critical defense and public-sector missions.

You will work on more than isolated scan execution or vulnerability reports. This role combines hands-on application-security testing, vulnerability analysis, remediation verification, software supply-chain security, and close collaboration across software, AI/ML, platform, and mission-focused teams.

Rackner has delivered more than $30 million in recent federal awards and supports mission-critical work across defense, civilian, and public-sector environments. We are looking for an application-security engineer who can build on that momentum by strengthening secure delivery, helping teams resolve vulnerabilities, and improving confidence in the software reaching mission users.

Benefits & Professional Growth

  • Competitive compensation
  • Company-supported certifications aligned with current and future program work
  • 401(k) with 100% company match up to 6%
  • Medical, dental, vision, life, and disability coverage
  • Paid time off and company holidays
  • Remote-work support and home-office equipment plan
  • Fitness and wellness reimbursement
  • Weekly pay schedule
  • Professional-development and future growth opportunities

Apply

If you are an application-security professional who wants broader influence across secure development, automated security testing, vulnerability remediation, and software supply-chain security, we would like to hear from you.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Rackner's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Rackner's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Rackner's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.