Software Engineer - Fullstack

Who we are DigiCert is a global leader in intelligent trust. We protect the digital world by ensuring the security, privacy, and authenticity of every interaction. Our AI-powered DigiCert ONE platform unifies PKI, DNS, and certificate lifecycle management, to secure infrastructure, software, devices, messages, AI content and agents. Learn why more than 100,000 organizations, including 90% of the Fortune 500, choose DigiCert to stop today’s threats and prepare for a quantum-safe future at www.digicert.com Job summary We’re looking for a Software Engineer who combines deep Java and React expertise with strong security fundamentals, and who treats AI as a genuine part of how they work — not a novelty. You’ll build the systems that aggregate threat intelligence, scan for vulnerabilities across code and dependencies, and sign and verify software artifacts — work that directly protects the software supply chain. You’ll own complex problems end-to-end and raise the technical bar for the engineers around you. If you want your work to matter at scale, this is where to do it. What you will do • Lead the design and development of Java backend services and RESTful APIs that power Secure Release’s core scanning and monitoring engine — driving architectural decisions, defining API contracts, and setting the bar for code quality across the team. • Use AI coding agents fluently (GitHub Copilot, Cursor, Claude Code, etc.) as a native part of your daily workflow — and help the team do the same; bring judgment on where AI accelerates delivery and where human review is non-negotiable • Own complex full-stack features end-to-end — from vulnerability aggregation to the React dashboards customers use to act on findings — covering everything from requirements through production, performance, and long-term maintainability • Build and maintain the CI/CD pipelines (Jenkins, GitHub Actions, or similar) that Secure Release itself runs on and secures — including container image scanning, signing, and the deployment pipelines customers integrate with • Work hands-on with Docker, Kubernetes, and infrastructure-as-code (Terraform, Helm) to run Secure Release’s scanning infrastructure reliably at scale • Collaborate with Product, Design, and senior engineers to turn security requirements and threat intelligence feeds into working, testable code • Use observability tools (New Relic, Splunk, Datadog) to monitor Secure Release’s own production systems and participate in incident response when something needs attention • Write unit and integration tests, participate in code reviews, and help raise the bar on code quality and test coverage across a product that other teams rely on for their own security posture What you will have • 3+ years of Java development experience; familiarity with Spring Boot, RESTful API design, and basic microservices concepts • Working knowledge of React including hooks, component design, and state management; exposure to frontend testing tools such as Jest • Familiarity with CI/CD pipelines, Docker, and Kubernetes operations; willingness to grow into infrastructure-as-code practices • Experience with relational databases (PostgreSQL or MySQL); ability to write and debug SQL queries and understand basic schema design • Exposure to cloud platforms (AWS, GCP, or Azure) and an eagerness to deepen cloud-native skills • Curiosity and a growth mindset — eager to learn about security domain concepts and take on increasing ownership over time Nice to have • Academic or project-level exposure to identity and access management, digital certificates, or PKI • Personal projects, open-source contributions, or coursework demonstrating full-stack development or security interest • Hands-on experience or strong interest in AI/LLM inte