Principal Vulnerability Engineer – Java Security Platform

JR United Kingdom; Stockport; On-site; GBP 70,000 - 100,000; Full time

Job summary

A leading global technology company is seeking a Principal Vulnerability Engineer to join their security vulnerability team focused on the Java platform. The ideal candidate will have over 10 years of platform security experience, demonstrating expertise in Java security, and contribute to proactive vulnerability research and assessments. This role also emphasizes leadership, independent work, and communication skills within a community-focused, inclusive workplace.

Benefits

Flexible medical plans

Life insurance

Retirement plans

Work-life balance

Qualifications

• At least 10+ years of hands-on experience in platform security.
• Deep knowledge of Java security model.
• Extensive experience with security protocols and best practices.

Responsibilities

• Conduct proactive research on new vulnerability signatures for Java.
• Develop and maintain security tools.
• Perform security assessments for new features in the JDK.

Skills

Leadership

Java

Security incident resolution

C/C++ programming

Remote teamwork

Communication

Job description

Social network you want to login/join with:

Principal Vulnerability Engineer – Java Security Platform, Stockport

Client: Oracle

Location: Stockport, United Kingdom

Job Category: Other

EU work permit required: Yes

Job Views: 3

Posted: 31.05.2025

Expiry Date: 15.07.2025

Job Description:

We are looking for a Principal Vulnerability Engineer to join the security vulnerability team for the Java platform. This team handles both offensive (red team) and defensive (blue team) security duties. Responsibilities include proactive research, security tooling, assessments, and assisting development teams with security code reviews. The ideal candidate must have at least 10+ years of hands-on experience in platform security, with deep knowledge of the Java security model. Extensive experience with security protocols and best practices is required. The candidate should be able to work independently, have a proven track record in security incident resolution, and utilize industry-standard tools. Past research and CVEs related to Java security are a plus. Proficiency in Java, expert-level C/C++ skills, and systems programming are essential. Strong leadership, self-motivation, remote teamwork ability, and communication skills are also required.

Responsibilities

Conduct proactive research on new vulnerability signatures for the Java platform, develop and maintain security tools, perform security assessments for new features in the JDK, and assist in security code reviews of Java and native source code.

About Us

As a global leader in cloud solutions, Oracle leverages advanced technology to solve today’s challenges. With over 40 years of industry experience, we thrive through innovation and integrity.

We are committed to fostering an inclusive workforce that encourages contribution from all. Oracle offers global career opportunities, work-life balance, competitive benefits, flexible medical, life insurance, and retirement plans. We also promote community involvement through volunteer programs.