Information Security Vulnerability Engineer

OCC Group; Uttoxeter; On-site; GBP 60,000 - 80,000; Full time

Job summary

OCC Group in Staffordshire is seeking an Information Security Vulnerability Engineer to identify, assess, and mitigate security vulnerabilities across IT, OT, cloud, and SaaS environments. You will work with infrastructure, application, and operations teams to drive remediation and strengthen the organisation's security posture.

The role demands a proactive mindset, strong technical fundamentals from prior technical support or infrastructure roles, and hands-on experience with vulnerability

Qualifications

• Experience in vulnerability management across IT/OT/cloud/SaaS environments.
• Hands-on experience with patching and remediation activities.
• Strong technical foundations from Technical Support, Service Desk, or Infrastructure roles.

Responsibilities

• Identify, assess, and mitigate security vulnerabilities across systems.
• Drive remediation through to resolution and collaborate with technical teams to reduce risk.
• Support vulnerability management processes and tooling to improve security resilience.

Job description

Information Security Vulnerability Engineer, Staffordshire

(Qualys, Rapid7, Nessus, Tanium, CrowdStrike)

Our well-established client is seeking an Information Security Vulnerability Engineer to join their growing team in Staffordshire.

In this role, you will play a key part in identifying, assessing, and mitigating security vulnerabilities across IT, OT, cloud, and SaaS environments. Working closely with infrastructure, application, and operations teams, you will help ensure security risks are effectively managed and remediated.

We are looking for a proactive individual who enjoys identifying vulnerabilities before they become security incidents and takes ownership of driving remediation through to resolution. This is an excellent opportunity for someone who thrives on continuous improvement and wants to make a tangible impact on an organisation's security posture.

Our client is particularly interested in candidates who have built strong technical foundations within Technical Support, Service Desk, or Infrastructure environments and have gained hands‑on experience in vulnerability management, patching, and remediation activities.

Experience managing and resolving security vulnerabilities through patch management, tooling and automation, system hardening, and working collaboratively with technical teams to reduce risk and improve overall security resilience.

Experience with any of the following security tools would be beneficial:

• Qualys
• Rapid7
• Nessus
• Tanium
• CrowdStrike

Our client is flexible regarding specific tool experience and is more interested in candidates who possess strong technical fundamentals and a security-focused mindset.

Great opportunity to make a real impact in a business that values proactive security and continuous improvement, our client offers progression and development.