Overview

Oracle is seeking a Principal Vulnerability Engineer to join our red/blue team efforts in the United States. In this role, you will focus on Java vulnerability engineering, resolving security issues, developing security tools, assessing new features, and conducting security code reviews. Help safeguard Oracle's products against emerging threats through proactive vulnerability management.

Responsibilities

• Identify and resolve Java-based vulnerabilities in red/blue team exercises.
• Develop and maintain security tools for vulnerability detection and mitigation.
• Perform security assessments on new product features and updates.
• Conduct thorough security code reviews for Java applications.
• Collaborate with engineering teams to integrate security best practices.
• Analyze and triage vulnerabilities using static and dynamic analysis tools.
• Contribute to threat modeling and risk assessment processes.
• Mentor junior engineers on vulnerability engineering techniques.

Qualifications

• 8+ years of experience in software security or vulnerability engineering.
• Expertise in Java programming and common vulnerability patterns (e.g., OWASP Top 10).
• Proficiency with security tools like SonarQube, Checkmarx, or Fortify.
• Experience in red team/blue team operations and penetration testing.
• Strong knowledge of secure coding practices and SDLC.
• Bachelor's degree in Computer Science, or equivalent experience.

Benefits

• Competitive salary and performance bonuses.
• Comprehensive health, dental, and vision insurance.
• 401(k) matching and employee stock purchase plan.
• Flexible remote work options in the United States.
• Professional development and certification reimbursement.