Principal Vulnerability Engineer – Java Security Platform

JR United Kingdom; Guildford; On-site; GBP 80,000 - 120,000; Full time

Job summary

A global leader in cloud solutions is seeking a Principal Vulnerability Engineer for its Java Security Platform team. The role involves conducting security assessments, developing tooling, and providing expert guidance to development teams. Ideal candidates will have substantial experience in platform security and a strong background in Java and C/C++. This position offers competitive benefits and opportunities within an innovative and inclusive environment.

Benefits

Global career opportunities

Competitive benefits

Flexible medical and life insurance

Retirement options

Community engagement programs

Qualifications

• 10+ years of hands-on experience in platform security.
• Expert-level proficiency in Java and C/C++.
• Experience with security incident resolution and tooling.

Responsibilities

• Conduct proactive vulnerability research for the Java platform.
• Create security tooling and conduct security assessments.
• Assist with security code reviews for Java and native implementations.

Skills

Java

C/C++

Platform Security

Security Protocols

Communication

Leadership

Job description

Social network you want to login/join with:

Principal Vulnerability Engineer – Java Security Platform, Guildford

Client: Oracle

Location: Guildford, United Kingdom

Job Category: Other

EU work permit required: Yes

Job Views:

3

Posted:

31.05.2025

Expiry Date:

15.07.2025

Job Description:

We are looking for a Principal Vulnerability Engineer to join the security vulnerability team for the Java platform. This team conducts both red team (offensive) and blue team (defensive) duties. Responsibilities include proactive research, security tooling, assessments, and assisting development teams with security code review. The ideal candidate must have at least 10+ years of hands-on experience in platform security, with deep knowledge of the Java security model. Minimum 10+ years of experience with security protocols and best practices is required. The candidate should be able to work independently on assigned tasks, have proven experience in security incident resolution, and proactive research using industry-standard tools. Past research and CVEs related to Java security issues are a plus. Proficiency in Java, expert-level C/C++ skills, and systems-level programming are essential. Strong leadership, self-motivation, remote team collaboration, and communication skills are also required.

Responsibilities

Responsibilities include proactive research on new vulnerability signatures for the Java platform, creating and maintaining security tooling, conducting security assessments for new features in the JDK, and assisting development teams with security code reviews. Ability to code in Java and review implementation code for both Java and native sources is required.

About Us

As a world leader in cloud solutions, Oracle leverages innovative technology to address current challenges. With over 40 years of industry experience, we partner with various sectors and operate with integrity. We are committed to fostering an inclusive workforce that promotes opportunities for all. Oracle offers global career opportunities, competitive benefits, flexible medical, life insurance, retirement options, and encourages community engagement through volunteer programs.