Principal Vulnerability Engineer – Java Security Platform

JR United Kingdom; Norwich; On-site; GBP 70,000 - 100,000; Full time

Job summary

A global leader in cloud solutions, Oracle, seeks a Principal Vulnerability Engineer for their Java platform security team in Norwich. The role focuses on both offensive and defensive security tasks, requiring extensive experience in platform security, Java, and C/C++. Join a company that values innovation and inclusivity, offering competitive benefits and opportunities for career growth.

Benefits

Competitive medical benefits

Life insurance

Retirement options

Community engagement through volunteer programs

Qualifications

• Minimum 10+ years of hands-on experience in platform security.
• Deep knowledge of the Java security model.
• Expert-level proficiency in Java and C/C++.

Responsibilities

• Conduct proactive research on new vulnerability signatures for Java platform.
• Develop and maintain security tooling.
• Perform security assessments for new features integrated into the JDK.

Skills

Java

C/C++

Security incident resolution

Proactive research

Security tooling

Code reviews

Leadership

Remote collaboration

Communication

Job description

Social network you want to login/join with:

Principal Vulnerability Engineer – Java Security Platform, Norwich

Client: Oracle

Location: Norwich

Job Category: Other

EU work permit required: Yes

Job Views: 3

Posted: 31.05.2025

Expiry Date: 15.07.2025

Job Description:

We are looking for a Principal Vulnerability Engineer to join the security vulnerability team for the Java platform. This team performs both offensive (red team) and defensive (blue team) duties. Responsibilities include proactive research, security tooling, assessments, and assisting development teams with security code reviews. The ideal candidate must have at least 10+ years of hands-on experience in platform security, with deep knowledge of the Java security model. Minimum 10+ years of experience with security protocols and best practices are required. The candidate should be able to work independently on assigned tasks, with proven experience in security incident resolution and proactive research using industry-standard tools. Past research and CVEs related to Java security issues are a plus. Must have proficiency in Java, expert-level C/C++ skills, and systems-level programming. Strong leadership, self-motivation, remote collaboration skills, and excellent communication skills are required.

Responsibilities:

Conduct proactive research on new vulnerability signatures for the Java platform, develop and maintain security tooling, perform security assessments for new features integrated into the JDK, and assist development teams with security code reviews. Ability to code in Java and review implementation code for both Java and native source code is essential.

About Us:

As a global leader in cloud solutions, Oracle leverages cutting-edge technology to address today’s challenges. With over 40 years of industry leadership, we thrive through innovation and integrity.

We believe true innovation starts with inclusivity. We are committed to fostering an inclusive workforce that offers opportunities for all.

Oracle careers provide global opportunities with a focus on work-life balance. We offer competitive benefits, including flexible medical, life insurance, and retirement options. We also promote community engagement through volunteer programs.