Principal Vulnerability Engineer – Java Security Platform

JR United Kingdom; Chelmsford; On-site; GBP 70,000 - 100,000; Full time

Job summary

A global leader in cloud solutions, Oracle, is seeking a Principal Vulnerability Engineer for their Java security platform team in Chelmsford. The role focuses on proactive security research, vulnerability assessments, and supporting development with security code reviews. Candidates should have significant experience in platform security, particularly in Java and C/C++. The company offers a commitment to diversity and numerous competitive benefits.

Benefits

Competitive benefits

Flexible medical options

Life insurance

Retirement options

Community volunteer programs

Qualifications

• 10+ years of hands-on experience in platform security.
• Deep knowledge of the Java security model.
• Strong leadership and excellent communication skills.

Responsibilities

• Conduct proactive research on new vulnerability signatures for the Java platform.
• Develop and maintain security tooling; assist in security code reviews.
• Perform security assessments for new JDK features.

Skills

Java

C/C++

Security incident resolution

Security assessments

Proactive research

Job description

Social network you want to login/join with:

Principal Vulnerability Engineer – Java Security Platform, Chelmsford

Client: Oracle

Location: Chelmsford

Job Category: Other

EU work permit required: Yes

Job Views: 3

Posted: 31.05.2025

Expiry Date: 15.07.2025

Job Description:

We are seeking a Principal Vulnerability Engineer to join the security vulnerability team for the Java platform. This team performs both red team (offensive) and blue team (defensive) duties. Responsibilities include proactive research, security tooling, assessments, and assisting development teams with security code reviews. The ideal candidate must have at least 10+ years of hands-on experience in platform security, with deep knowledge of the Java security model. Extensive experience with security protocols and best practices is required. The candidate should be able to work independently, have a proven track record in security incident resolution, and utilize industry-standard tools for proactive research. Experience with Java security research and CVEs is a plus. Proficiency in Java, expert-level C/C++ skills, and systems programming are essential. Strong leadership, self-motivation, remote collaboration skills, and excellent communication are required.

Responsibilities:

Conduct proactive research on new vulnerability signatures for the Java platform, develop and maintain security tooling, perform security assessments for new JDK features, and assist in security code reviews. Ability to code in Java and review both Java and native source code is required.

About Us:

As a global leader in cloud solutions, Oracle leverages cutting-edge technology to address today’s challenges. With over 40 years of industry presence, we foster innovation through integrity and inclusivity. We are committed to an inclusive workforce, offering global opportunities, competitive benefits, flexible medical, life insurance, retirement options, and community volunteer programs.