Vulnerability Manager (Contract)

HCC Service Company, Inc.; Houston (TX); Hybrid; USD 110,000 - 150,000; Full time

Job summary

Tokio Marine HCC is seeking a Vulnerability Manager in Houston, TX, to lead the organization’s vulnerability management program across IT infrastructure, applications, and cloud environments. The role combines strategic oversight with hands-on remediation, risk assessment, and metric-driven reporting.

The ideal candidate will have 5+ years in vulnerability management or security operations, experience with Qualys and ticketing/GRC platforms, and a strong foundation in scripting and DevSecOps

Qualifications

• Bachelor's degree in Cybersecurity, IT, CS, or related field.
• 5+ years in vulnerability management or security operations.
• Experience with Qualys, Akamai, ticketing (ServiceNow/Jira) and GRC platforms.
• Scripting/automation experience (Python, PowerShell).

Responsibilities

• Develop and manage the enterprise vulnerability management lifecycle, including scanning, assessment, reporting, and remediation tracking.
• Conduct regular vulnerability scans using Qualys or similar platforms.
• Analyze scan results, validate findings, and work with IT and development teams to prioritize and remediate vulnerabilities.
• Maintain an accurate inventory of assets and ensure proper coverage of vulnerability scanning tools.
• Collaborate with threat intelligence and incident response teams to assess exploitability and risk context.
• Track remediation efforts and provide regular status updates to leadership and stakeholders.

Skills

Vulnerability management

Security operations

Risk assessment

Scripting automation

DevSecOps

Education

Bachelor's degree in Cybersecurity

Tools

Qualys

ServiceNow

Jira

GRC platforms

Job description

Vulnerability Manager – Houston, TX (Hybrid 4:1) – Contract (Temp to Hire)

Job Title: Vulnerability Manager

Location: Houston, TX (Hybrid 4:1)

Reports To: Director of Security Governance

Employment Type: Contract - Temp to Hire

About Us

Help us insure it. Tokio Marine HCC is a leading global specialty insurance group, backed by the strength and stability of the Tokio Marine Group. With more than 50 years of sustained growth and profitability, and offices across the United States, the United Kingdom, Europe, and other international locations, we offer more than 100 classes of specialty insurance—covering everything from the crops that feed us and the concerts that entertain us to rescuing travelers abroad. Guided by our Mind Over Risk philosophy, we empower clients to pursue opportunities with confidence while fostering a culture rooted in innovation, collaboration, and trust. Always Advancing, we embrace an entrepreneurial spirit; as Experts in Tomorrow, we anticipate what’s next; and by Reaching Out, we build genuine connections that enable our people and our business to thrive.

Role Overview

Lead the organization's vulnerability management program by identifying, assessing, prioritizing, and coordinating the remediation of security vulnerabilities across IT infrastructure, applications, and cloud environments. Improve the organization's security posture through continuous risk reduction.

Key Responsibilities

• Develop and manage the enterprise vulnerability management lifecycle, including scanning, assessment, reporting, and remediation tracking.
• Conduct regular vulnerability scans using Qualys or similar platforms.
• Analyze scan results, validate findings, and work with IT and development teams to prioritize and remediate vulnerabilities.
• Maintain an accurate inventory of assets and ensure proper coverage of vulnerability scanning tools.
• Collaborate with threat intelligence and incident response teams to assess exploitability and risk context.
• Track remediation efforts and provide regular status updates to leadership and stakeholders.
• Develop and maintain metrics and dashboards to measure program effectiveness and risk reduction.
• Stay current with emerging threats, vulnerabilities, and security advisories.
• Support compliance and audit activities related to vulnerability management.
• Provide guidance and training on secure configuration and patch management best practices.

What You Bring

• Education: Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field.
• Relevant certifications: CISSP, OSCP, CEH, CompTIA Security+, or similar.
• Experience: 5+ years in vulnerability management, security operations, or related cybersecurity roles.
• Experience with vulnerability management tools (e.g., Qualys, Akamai).
• Experience with ticketing systems (e.g., ServiceNow, Jira) and GRC platforms is a plus.
• Scripting or automation experience (e.g., Python, PowerShell).
• Experience with container and DevSecOps vulnerability management (e.g., Docker, Kubernetes, SCA tools).

Key Competencies

• Strong knowledge of vulnerability scanning tools and techniques.
• Familiarity with Windows, Linux, networking, AWS, Azure, and web application security.
• Understanding of CVSS scoring, risk assessment methodologies, and remediation workflows.
• Strong communication and collaboration skills.
• Ability to manage multiple priorities in a fast‑paced environment.

Equal Opportunity Employer

TMHCC is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity, genetic information, marital status, medical condition, national origin, physical or mental disability, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations, and ordinances.