Information Security Vulnerability Engineer

OCC Group; Stafford; On-site; GBP 60,000 - 90,000; Full time

Job summary

OCC Group is seeking an Information Security Vulnerability Engineer to join our team in Staffordshire. You will identify, assess, and mitigate vulnerabilities across IT, OT, cloud, and SaaS environments, working closely with infrastructure, application, and operations teams to ensure risks are remediated.

We value proactive vulnerability management and a security-minded approach, with hands-on experience in patching, remediation, and automation.

Qualifications

• Experience identifying vulnerabilities across IT/OT/cloud/SaaS.
• Experience driving remediation to resolution and risk reduction.
• Hands-on with patching, system hardening, and tooling automation.

Responsibilities

• Identify, assess and mitigate vulnerabilities across IT/OT/cloud/SaaS environments.
• Lead remediation efforts with infrastructure and operations teams.
• Drive patch management and remediation activities to reduce security risk.
• Collaborate with technical teams to improve resilience and security posture.

Skills

Vulnerability management

Patch management

Automation

Security mindset

Cross-functional collaboration

Tools

Qualys

Rapid7

Nessus

Tanium

CrowdStrike

Job description

Information Security Vulnerability Engineer, Staffordshire

(Qualys, Rapid7, Nessus, Tanium, CrowdStrike)

Our well-established client is seeking an Information Security Vulnerability Engineer to join their growing team in Staffordshire.

In this role, you will play a key part in identifying, assessing, and mitigating security vulnerabilities across IT, OT, cloud, and SaaS environments. Working closely with infrastructure, application, and operations teams, you will help ensure security risks are effectively managed and remediated.

We are looking for a proactive individual who enjoys identifying vulnerabilities before they become security incidents and takes ownership of driving remediation through to resolution. This is an excellent opportunity for someone who thrives on continuous improvement and wants to make a tangible impact on an organisation's security posture.

Our client is particularly interested in candidates who have built strong technical foundations within Technical Support, Service Desk, or Infrastructure environments and have gained hands-on experience in vulnerability management, patching, and remediation activities.

Experience managing and resolving security vulnerabilities through patch management, tooling and automation, system hardening, and working collaboratively with technical teams to reduce risk and improve overall security resilience.

Experience with any of the following security tools would be beneficial: Qualys, Rapid7, Nessus, Tanium, CrowdStrike.

Our client is flexible regarding specific tool experience and is more interested in candidates who possess strong technical fundamentals and a security-focused mindset.

Great opportunity to make a real impact in a business that values proactive security and continuous improvement, our client offers progression and development.