Vulnerability Management Specialist

Core Specialty Insurance Holdings, Inc.•Cincinnati, OH

8d•Hybrid

About The Position

The Vulnerability Management Specialist is a hands-on individual contributor responsible for executing Core Specialty’s vulnerability management program across endpoints, servers, cloud resources, and applications. The role focuses on continuous vulnerability scanning, risk analysis, remediation coordination, and reporting, in collaboration with IT, Infrastructure, Endpoint, and Threat teams. The successful candidate will work in a metrics-driven, SLA-based environment and translate technical findings into actionable remediation guidance. The position follows a hybrid schedule of three days in the office and two days remote, based out of the Dallas, Texas, or Cincinnati, Ohio office. Relocation assistance is not offered. Applicants must be authorized to work for any employer in the United States. The company cannot sponsor or take over sponsorship of an employment visa for this position.

Requirements

At least 4 years of experience in vulnerability management, security engineering, or threat operations.
Hands-on experience with vulnerability scanning platforms; Qualys is preferred, while Tenable or Rapid7 is acceptable.
Experience working with Intune, JAMF, or similar endpoint management tools.
Strong understanding of CVSS scoring and risk prioritization, patch management and remediation workflows, and endpoint, server, and cloud security fundamentals.
Ability to analyze technical findings and communicate risk clearly to non-security teams.
Strong documentation and organizational skills.
Authorization to work for any employer in the United States; visa sponsorship is not available.

Nice To Haves

CompTIA Security+ certification.
Qualys Vulnerability Management certifications.
GIAC certifications, such as GSEC or GCIH.
CISSP certification or progress toward certification.

Responsibilities

Conduct continuous vulnerability scanning across enterprise assets using Qualys and related tools.
Analyze scan results to validate findings, remove false positives, and assess exploitability.
Prioritize vulnerabilities using CVSS, Qualys Detection Score (QDS), asset criticality, and business impact.
Enforce remediation SLAs aligned to severity: Critical—7 days, High—30 days, Medium—60 days, and Low—180 days.
Partner with Infrastructure, EUC, Cloud, and Application teams to drive timely remediation.
Support remediation activities using Qualys, Intune, JAMF, PolicyPak, and Microsoft Defender.
Align vulnerability management activities with NIST, CIS Controls, ISO 27001, and insurance regulatory expectations.
Partner with Threat Intelligence and SOC teams to assess vulnerability exposure related to active threats.
Develop PowerShell scripts and workflows to support remediation, reporting, and validation.