Principal Vulnerability Engineer – Java Security Platform

JR United Kingdom; High Wycombe; On-site; GBP 80,000 - 110,000; Full time

Job summary

A global leader in cloud solutions is seeking a Principal Vulnerability Engineer for their Java Security Platform team in High Wycombe. The role involves proactive research and development of security tooling, along with significant responsibilities in security assessments and code reviews. Ideal candidates should possess extensive Java expertise, proven leadership abilities, and a track record in security incident resolution. Competitive benefits and a focus on inclusivity make this an appealing opportunity for experienced security professionals.

Benefits

Competitive benefits

Flexible medical and life insurance

Retirement options

Employee community involvement through volunteer programs

Qualifications

• 10+ years of hands-on experience in platform security.
• Deep knowledge of Java security model.
• Extensive experience with security protocols and best practices.

Responsibilities

• Conduct proactive research on new vulnerability signatures for the Java platform.
• Develop and maintain security tooling.
• Perform security assessments for new JDK features and security code reviews.

Skills

Leadership

Self-motivation

Remote collaboration

Communication

Java

C/C++

Systems programming

Job description

Social network you want to login/join with:

Principal Vulnerability Engineer – Java Security Platform, High Wycombe

Client: Oracle

Location: High Wycombe, United Kingdom

Job Category: Other

EU work permit required: Yes

Job Views:

3

Posted:

31.05.2025

Expiry Date:

15.07.2025

Job Description:

We are looking for a Principal Vulnerability Engineer to join the security vulnerability team for the Java platform. The team handles both red team (offensive) and blue team (defensive) activities. Responsibilities include proactive research, security tooling, assessments, and assisting development teams with security code reviews. The ideal candidate must have at least 10+ years of hands-on experience in platform security, with deep knowledge of the Java security model. Extensive experience with security protocols and best practices is required. The candidate should be able to work independently, have a proven track record in security incident resolution, and utilize industry-standard tools for proactive research. Past research and CVEs related to Java security are a plus. Proficiency in Java, expert-level C/C++ skills, and systems programming are essential. Strong leadership, self-motivation, remote collaboration, and communication skills are also required.

Responsibilities:

Conduct proactive research on new vulnerability signatures for the Java platform, develop and maintain security tooling, perform security assessments for new JDK features, and assist in security code reviews. Ability to code in Java and review implementation code in both Java and native source code is necessary.

About Us:

As a global leader in cloud solutions, Oracle leverages innovative technology to address today’s challenges. With over 40 years of industry presence, we partner with leading organizations across sectors and are committed to operating with integrity.

We believe innovation starts with inclusivity, which is why we foster an inclusive workforce that promotes opportunities for everyone.

Oracle offers global career opportunities with a focus on work-life balance. We provide competitive benefits, flexible medical, life insurance, and retirement options. We also support employee community involvement through volunteer programs.