Vulnerability Manager

Search Services; Houston (TX); Hybrid; USD 110,000 - 170,000; Full time

Job summary

Our Client seeks an experienced Vulnerability Manager to lead its enterprise vulnerability management program across infrastructure, applications, and cloud environments. You will identify, assess, prioritize, and coordinate remediation, partnering with IT and development teams to strengthen security posture, report metrics, and support audits in a global organization.

The role emphasizes collaboration, risk-based prioritization, and continuous improvement in security controls, with a hybrid

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related discipline.
• Five or more years of experience in vulnerability management, security operations, or a related cybersecurity role.
• Hands-on experience with vulnerability management platforms such as Qualys or Akamai.
• Experience working with ticketing platforms such as ServiceNow or Jira.
• Knowledge of Windows, Linux, networking, AWS, Azure, and web application security.
• Strong understanding of CVSS scoring, vulnerability prioritization, risk assessment methodologies, and remediation workflows.
• Excellent communication, collaboration, and stakeholder management skills.
• Ability to manage multiple priorities in a fast-paced environment.

Responsibilities

• Develop and manage the enterprise vulnerability management lifecycle, including scanning, assessment, reporting, and remediation tracking.
• Conduct regular vulnerability scans using Qualys or similar vulnerability management platforms.
• Analyze scan results, validate findings, and partner with IT and development teams to prioritize and remediate vulnerabilities.
• Maintain an accurate inventory of technology assets and ensure appropriate vulnerability scanning coverage.
• Collaborate with threat intelligence and incident response teams to evaluate exploitability and business risk.
• Track remediation efforts and provide regular status updates to leadership and key stakeholders.
• Develop and maintain metrics, dashboards, and reporting that measure program effectiveness and demonstrate risk reduction.
• Stay current with emerging vulnerabilities, security advisories, and threat intelligence.
• Support compliance initiatives and audit activities related to vulnerability management.
• Provide guidance on secure configuration standards and patch management best practices.

Skills

Vulnerability management

Security operations

Stakeholder management

Communication

Prioritization

Education

Bachelor's degree

Tools

Qualys

Akamai

ServiceNow

Jira

Windows

Linux

AWS

Azure

Python

PowerShell

Docker

Kubernetes

SCA tools

Job description

About Our Client

Houston, TX (Hybrid 4:1) Contract to Hire

Our Client is a leading global specialty insurance organization with more than 50 years of sustained growth and profitability and a strong international presence. Backed by the strength and stability of a globally recognized insurance group, Our Client delivers more than 100 specialty insurance products while fostering a culture built on innovation, collaboration, trust, and continuous improvement. Driven by a philosophy of thoughtful risk management, Our Client empowers employees to solve complex challenges, embrace new opportunities, and help shape the future of the business.

About the Role

Our Client is seeking an experienced Vulnerability Manager to lead its enterprise vulnerability management program. This contract-to-hire opportunity offers the chance to make an immediate impact while positioning yourself for long-term career growth with a global organization. In this role, you will identify, assess, prioritize, and coordinate the remediation of security vulnerabilities across infrastructure, applications, and cloud environments. You will partner with cross-functional teams to continuously strengthen the organization's security posture through proactive risk reduction, reporting, and governance.

Responsibilities

• Develop and manage the enterprise vulnerability management lifecycle, including scanning, assessment, reporting, and remediation tracking.
• Conduct regular vulnerability scans using Qualys or similar vulnerability management platforms.
• Analyze scan results, validate findings, and partner with IT and development teams to prioritize and remediate vulnerabilities.
• Maintain an accurate inventory of technology assets and ensure appropriate vulnerability scanning coverage.
• Collaborate with threat intelligence and incident response teams to evaluate exploitability and business risk.
• Track remediation efforts and provide regular status updates to leadership and key stakeholders.
• Develop and maintain metrics, dashboards, and reporting that measure program effectiveness and demonstrate risk reduction.
• Stay current with emerging vulnerabilities, security advisories, and threat intelligence.
• Support compliance initiatives and audit activities related to vulnerability management.
• Provide guidance on secure configuration standards and patch management best practices.

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related discipline.
• Five or more years of experience in vulnerability management, security operations, or a related cybersecurity role.
• Hands-on experience with vulnerability management platforms such as Qualys or Akamai.
• Experience working with ticketing platforms such as ServiceNow or Jira.
• Knowledge of Windows, Linux, networking, AWS, Azure, and web application security.
• Strong understanding of CVSS scoring, vulnerability prioritization, risk assessment methodologies, and remediation workflows.
• Excellent communication, collaboration, and stakeholder management skills.
• Ability to manage multiple priorities in a fast-paced environment.

Preferred Qualifications

• Professional certifications such as CISSP, OSCP, CEH, CompTIA Security+, or similar.
• Experience with Governance, Risk, and Compliance (GRC) platforms.
• Experience with scripting or automation using Python or PowerShell.
• Experience with container security and DevSecOps vulnerability management, including Docker, Kubernetes, and Software Composition Analysis (SCA) tools.