Principal Vulnerability Engineer – Java Security Platform

JR United Kingdom; Gloucester; On-site; GBP 75,000 - 110,000; Full time

Job summary

A leading company in cloud solutions, JR United Kingdom, seeks a Principal Vulnerability Engineer for their Java security platform team. The role involves proactive research, security tooling, and assessments to ensure robust platform security. The ideal candidate must have over 10 years of experience, expert-level coding skills in both Java and C/C++, and strong leadership qualities. Join a team committed to innovation and inclusivity while enjoying competitive benefits and work-life balance.

Benefits

Flexible medical options

Life insurance

Retirement options

Community engagement programs

Qualifications

• 10+ years of hands-on experience in platform security.
• Deep knowledge of the Java security model necessary.
• Proven track record of security incident resolution.

Responsibilities

• Conduct proactive research for new vulnerability signatures for the Java platform.
• Develop and maintain security tools and conduct security assessments.
• Assist development teams with security code reviews.

Skills

Security protocols

Leadership

C/C++

Java

Communication

Proficiency in coding

Job description

Principal Vulnerability Engineer – Java Security Platform, Gloucester

Client:

Oracle

Location:

Gloucester, United Kingdom

Job Category:

Other

EU work permit required:

Yes

Job Views:

3

Posted:

31.05.2025

Expiry Date:

15.07.2025

Job Description:

We are looking for a Principal Vulnerability Engineer to join the security vulnerability team for the Java platform. This team conducts both red team (offensive) and blue team (defensive) duties. Responsibilities include proactive research, security tooling, assessments, and assisting development teams with security code reviews. The ideal candidate must have at least 10+ years of hands-on experience in platform security, with deep knowledge of the Java security model. Extensive experience with security protocols and best practices is required. The candidate should be able to work independently on assigned tasks, have a proven track record of security incident resolution, and experience with industry-standard tools. Past research and CVEs related to Java security issues are a plus. Proficiency in Java, expert-level C/C++ skills, and systems programming are essential. Strong leadership, self-motivation, remote collaboration abilities, and excellent communication skills are also required.

Responsibilities:

Responsibilities include proactive research for new vulnerability signatures for the Java platform, developing and maintaining security tools, conducting security assessments for new JDK features, and assisting development teams with security code reviews. Proficiency in coding and review of both Java and native source code is required.

About Us:

As a world leader in cloud solutions, Oracle leverages cutting-edge technology to address today’s challenges. With over 40 years of industry presence, we thrive through innovation and integrity. We are committed to fostering an inclusive workforce that promotes opportunities for all.

Oracle offers global career opportunities with a focus on work-life balance, providing competitive benefits, flexible medical, life insurance, and retirement options. We encourage community engagement through volunteer programs.

Note:

If you are not a passport holder of the country where the vacancy is located, you might need a work permit. Check our Blog for more information.

Applicants should not provide bank or payment details; all applications must be submitted via the 'Apply now' button.

Created on 31/05/2025 by JR, United Kingdom