Software Engineer - Fullstack

Who we are DigiCert is a global leader in intelligent trust. We protect the digital world by ensuring the security, privacy, and authenticity of every interaction. Our AI-powered DigiCert ONE platform unifies PKI, DNS, and certificate lifecycle management, to secure infrastructure, software, devices, messages, AI content and agents. Learn why more than 100,000 organizations, including 90% of the Fortune 500, choose DigiCert to stop today’s threats and prepare for a quantum-safe future at www.digicert.com Job summary We’re looking for a Software Engineer who combines deep Java and React expertise with strong security fundamentals, and who treats AI as a genuine part of how they work — not a novelty. You’ll build the systems that aggregate threat intelligence, scan for vulnerabilities across code and dependencies, and sign and verify software artifacts — work that directly protects the software supply chain. You’ll own complex problems end-to-end and raise the technical bar for the engineers around you. If you want your work to matter at scale, this is where to do it. What you will do - Lead the design and development of Java backend services and RESTful APIs that power Secure Release’s core scanning and monitoring engine — driving architectural decisions, defining API contracts, and setting the bar for code quality across the team. - Use AI coding agents fluently (GitHub Copilot, Cursor, Claude Code, etc.) as a native part of your daily workflow — and help the team do the same; bring judgment on where AI accelerates delivery and where human review is non-negotiable - Own complex full-stack features end-to-end — from vulnerability aggregation to the React dashboards customers use to act on findings — covering everything from requirements through production, performance, and long-term maintainability - Build and maintain the CI/CD pipelines (Jenkins, GitHub Actions, or similar) that Secure Release itself runs on and secures — including container image scanning, signing, and the deployment pipelines customers integrate with - Work hands-on with Docker, Kubernetes, and infrastructure-as-code (Terraform, Helm) to run Secure Release’s scanning infrastructure reliably at scale - Collaborate with Product, Design, and senior engineers to turn security requirements and threat intelligence feeds into working, testable code - Use observability tools (New Relic, Splunk, Datadog) to monitor Secure Release’s own production systems and participate in incident response when something needs attention - Write unit and integration tests, participate in code reviews, and help raise the bar on code quality and test coverage across a product that other teams rely on for their own security posture What you will have - 3+ years of Java development experience; familiarity with Spring Boot, RESTful API design, and basic microservices concepts - Working knowledge of React including hooks, component design, and state management; exposure to frontend testing tools such as Jest - Familiarity with CI/CD pipelines, Docker, and Kubernetes operations; willingness to grow into infrastructure-as-code practices - Experience with relational databases (PostgreSQL or MySQL); ability to write and debug SQL queries and understand basic schema design - Exposure to cloud platforms (AWS, GCP, or Azure) and an eagerness to deepen cloud-native skills - Curiosity and a growth mindset — eager to learn about security domain concepts and take on increasing ownership over time Nice to have - Academic or project-level exposure to identity and access management, digital certificates, or PKI - Personal projects, open-source contributions, or coursework demonstrating full-stack development or security interest - Hands-on experience or strong interest in AI/LLM integration — calling LLM APIs, prompt engineering, or embedding AI-assisted workflows into Java/React applications Benefits - Generous time off policies - Top shelf benefits - Education, wellness and lifestyle support To protect candidate information and maintain a secure hiring process, all applications must be submitted through our careers portal. Resumes or CVs sent directly via email will not be reviewed or considered. #LI-SD1