The posting
Who we are
DigiCert is a global leader in intelligent trust. We protect the digital world by ensuring the security, privacy, and authenticity of every interaction. Our AI-powered DigiCert ONE platform unifies PKI, DNS, and certificate lifecycle management, to secure infrastructure, software, devices, messages, AI content and agents. Learn why more than 100,000 organizations, including 90% of the Fortune 500, choose DigiCert to stop today’s threats and prepare for a quantum-safe future at www.digicert.com
Job summary
We’re looking for a Software Engineer who combines deep Java and React expertise with strong security fundamentals, and who treats AI as a genuine part of how they work — not a novelty. You’ll build the systems that aggregate threat intelligence, scan for vulnerabilities across code and dependencies, and sign and verify software artifacts — work that directly protects the software supply chain. You’ll own complex problems end-to-end and raise the technical bar for the engineers around you. If you want your work to matter at scale, this is where to do it.
What you will do
- Lead the design and development of Java backend services and RESTful APIs that power Secure Release’s core scanning and monitoring engine — driving architectural decisions, defining API contracts, and setting the bar for code quality across the team.
- Use AI coding agents fluently (GitHub Copilot, Cursor, Claude Code, etc.) as a native part of your daily workflow — and help the team do the same; bring judgment on where AI accelerates delivery and where human review is non-negotiable
- Own complex full-stack features end-to-end — from vulnerability aggregation to the React dashboards customers use to act on findings — covering everything from requirements through production, performance, and long-term maintainability
- Build and maintain the CI/CD pipelines (Jenkins, GitHub Actions, or similar) that Secure Release itself runs on and secures — including container image scanning, signing, and the deployment pipelines customers integrate with
- Work hands-on with Docker, Kubernetes, and infrastructure-as-code (Terraform, Helm) to run Secure Release’s scanning infrastructure reliably at scale
- Collaborate with Product, Design, and senior engineers to turn security requirements and threat intelligence feeds into working, testable code
- Use observability tools (New Relic, Splunk, Datadog) to monitor Secure Release’s own production systems and participate in incident response when something needs attention
- Write unit and integration tests, participate in code reviews, and help raise the bar on code quality and test coverage across a product that other teams rely on for their own security posture
What you will have
- 3+ years of Java development experience; familiarity with Spring Boot, RESTful API design, and basic microservices concepts
- Working knowledge of React including hooks, component design, and state management; exposure to frontend testing tools such as Jest
- Familiarity with CI/CD pipelines, Docker, and Kubernetes operations; willingness to grow into infrastructure-as-code practices
- Experience with relational databases (PostgreSQL or MySQL); ability to write and debug SQL queries and understand basic schema design
- Exposure to cloud platforms (AWS, GCP, or Azure) and an eagerness to deepen cloud-native skills
- Curiosity and a growth mindset — eager to learn about security domain concepts and take on increasing ownership over time
Nice to have
- Academic or project-level exposure to identity and access management, digital certificates, or PKI
- Personal projects, open-source contributions, or coursework demonstrating full-stack development or security interest
- Hands-on experience or strong interest in AI/LLM integration — calling LLM APIs, prompt engineering, or embedding AI-assisted workflows into Java/React applications
Benefits
- Generous time off policies
- Top shelf benefits
- Education, wellness and lifestyle support
To protect candidate information and maintain a secure hiring process, all applications must be submitted through our careers portal. Resumes or CVs sent directly via email will not be reviewed or considered.
#LI-SD1
