Job summary

We’re looking for a Software Engineer who combines deep Java and React expertise with strong security fundamentals, and who treats AI as a genuine part of how they work — not a novelty. You’ll build the systems that aggregate threat intelligence, scan for vulnerabilities across code and dependencies, and sign and verify software artifacts — work that directly protects the software supply chain. You’ll own complex problems end-to-end and raise the technical bar for the engineers around you. If you want your work to matter at scale, this is where to do it.

What you will do

• Lead the design and development of Java backend services and RESTful APIs that power Secure Release’s core scanning and monitoring engine — driving architectural decisions, defining API contracts, and setting the bar for code quality across the team.
• Use AI coding agents fluently (GitHub Copilot, Cursor, Claude Code, etc.) as a native part of your daily workflow — and help the team do the same; bring judgment on where AI accelerates delivery and where human review is non-negotiable
• Own complex full-stack features end-to-end — from vulnerability aggregation to the React dashboards customers use to act on findings — covering everything from requirements through production, performance, and long-term maintainability
• Build and maintain the CI/CD pipelines (Jenkins, GitHub Actions, or similar) that Secure Release itself runs on and secures — including container image scanning, signing, and the deployment pipelines customers integrate with
• Work hands-on with Docker, Kubernetes, and infrastructure-as-code (Terraform, Helm) to run Secure Release’s scanning infrastructure reliably at scale
• Collaborate with Product, Design, and senior engineers to turn security requirements and threat intelligence feeds into working, testable code
• Use observability tools (New Relic, Splunk, Datadog) to monitor Secure Release’s own production systems and participate in incident response when something needs attention
• Write unit and integration tests, participate in code reviews, and help raise the bar on code quality and test coverage across a product that other teams rely on for their own security posture

What you will have

• 3+ years of Java development experience; familiarity with Spring Boot, RESTful API design, and basic microservices concepts
• Working knowledge of React including hooks, component design, and state management; exposure to frontend testing tools such as Jest
• Familiarity with CI/CD pipelines, Docker, and Kubernetes operations; willingness to grow into infrastructure-as-code practices
• Experience with relational databases (PostgreSQL or MySQL); ability to write and debug SQL queries and understand basic schema design
• Exposure to cloud platforms (AWS, GCP, or Azure) and an eagerness to deepen cloud-native skills
• Curiosity and a growth mindset — eager to learn about security domain concepts and take on increasing ownership over time

Nice to have

• Academic or project-level exposure to identity and access management, digital certificates, or PKI
• Personal projects, open-source contributions, or coursework demonstrating full-stack development or security interest
• Hands-on experience or strong interest in AI/LLM integration — calling LLM APIs, prompt engineering, or embedding AI-assisted workflows into Java/React applications

Benefits

• Generous time off policies
• Top shelf benefits
• Education, wellness and lifestyle support

To protect candidate information and maintain a secure hiring process, all applications must be submitted through our careers portal. Resumes or CVs sent directly via email will not be reviewed or considered.

#LI-SD1