Principal Vulnerability Engineer – Java Security Platform

JR United Kingdom; Chesterfield; On-site; GBP 70,000 - 100,000; Full time

Job summary

A leading global technology firm seeks a Principal Vulnerability Engineer to join its Java security platform team. The selected candidate will engage in both offensive and defensive security, leveraging extensive experience in platform security and vulnerability research. This role offers opportunities for independent work and collaboration on critical security assessments and tooling development, promoting innovation and proactive security measures.

Benefits

Flexible medical insurance

Life insurance

Retirement options

Community engagement programs

Qualifications

• 10+ years of hands-on experience in platform security.
• Deep knowledge of Java security model and protocols.
• Proficiency in Java and expert-level C/C++ skills.

Responsibilities

• Conduct proactive research on new vulnerability signatures.
• Maintain security tooling and conduct assessments for JDK features.
• Assist in security code reviews for Java and native source code.

Skills

Java

C/C++

Security incident resolution

Communication

Leadership

Remote teamwork

Job description

Social network you want to login/join with:

Principal Vulnerability Engineer – Java Security Platform, chesterfield

col-narrow-left

Client:

Oracle

Location:

chesterfield, United Kingdom

Job Category:

Other

-

EU work permit required:

Yes

col-narrow-right

Job Views:

3

Posted:

31.05.2025

Expiry Date:

15.07.2025

col-wide

Job Description:

We are looking for a Principal Vulnerability Engineer who will be part of the security vulnerability team for the Java platform. This team conducts both the red team (offensive) and blue team (defensive) duties. Responsibilities include proactive research, security tooling, assessments, and assisting development teams with security code review. The candidate must have at least 10+ years of hands-on experience in platform security, with deep knowledge of the Java security model. Minimum 10+ years of experience with security protocols and best practices are required. The ideal candidate is expected to work independently on assigned tasks. Proven experience in security incident resolution and proactive research using industry-standard tools is essential. Past research and CVEs related to Java security issues are a plus. Proficiency in Java, expert-level C/C++ skills, and systems-level programming are required. Strong leadership, self-motivation, remote teamwork ability, and communication skills are also necessary.

Responsibilities

Responsibilities include proactive research on new vulnerability signatures for the Java platform, creating and maintaining security tooling, conducting security assessments for new features in the JDK, and assisting development teams with security code reviews. Ability to code in Java and review implementation code for both Java and native source code is required.

About Us

As a global leader in cloud solutions, Oracle leverages cutting-edge technology to address modern challenges. With over 40 years of experience, we have partnered across industries and thrive on innovation and integrity.

We believe true innovation starts with empowering everyone to contribute. We are committed to fostering an inclusive workforce that offers equal opportunities.

Oracle offers global career opportunities with a focus on work-life balance. Our benefits include flexible medical, life insurance, and retirement options. We also promote community engagement through volunteer programs.