Vulnerability Program Lead — Hybrid Houston (Contract)

HCC Service Company, Inc.; Houston (TX); Hybrid; USD 110,000 - 150,000; Full time

Job summary

Tokio Marine HCC is seeking a Vulnerability Manager in Houston, TX, to lead the organization’s vulnerability management program across IT infrastructure, applications, and cloud environments. The role combines strategic oversight with hands-on remediation, risk assessment, and metric-driven reporting.

The ideal candidate will have 5+ years in vulnerability management or security operations, experience with Qualys and ticketing/GRC platforms, and a strong foundation in scripting and DevSecOps

Qualifications

• Bachelor's degree in Cybersecurity, IT, CS, or related field.
• 5+ years in vulnerability management or security operations.
• Experience with Qualys, Akamai, ticketing (ServiceNow/Jira) and GRC platforms.
• Scripting/automation experience (Python, PowerShell).

Responsibilities

• Develop and manage the enterprise vulnerability management lifecycle, including scanning, assessment, reporting, and remediation tracking.
• Conduct regular vulnerability scans using Qualys or similar platforms.
• Analyze scan results, validate findings, and work with IT and development teams to prioritize and remediate vulnerabilities.
• Maintain an accurate inventory of assets and ensure proper coverage of vulnerability scanning tools.
• Collaborate with threat intelligence and incident response teams to assess exploitability and risk context.
• Track remediation efforts and provide regular status updates to leadership and stakeholders.

Skills

Vulnerability management

Security operations

Risk assessment

Scripting automation

DevSecOps

Education

Bachelor's degree in Cybersecurity

Tools

Qualys

ServiceNow

Jira

GRC platforms

Job description

Tokio Marine HCC is seeking a Vulnerability Manager in Houston, TX, to lead the organization’s vulnerability management program across IT infrastructure, applications, and cloud environments. The role combines strategic oversight with hands-on remediation, risk assessment, and metric-driven reporting.

The ideal candidate will have 5+ years in vulnerability management or security operations, experience with Qualys and ticketing/GRC platforms, and a strong foundation in scripting and DevSecOps