Vulnerability Manager (Contract)

Houston, Texas, United StatesWebsite

Full details on LinkedIn

The complete job description, requirements, and application details are available on the original posting.

About Tokio Marine HCC

Tokio Marine HCC (TMHCC) is a global specialty insurance company based in Houston, Texas, established in 1974. Originally known as Houston Casualty Company, it became part of the Tokio Marine Group in 2015 following a significant acquisition. TMHCC operates in over 100 classes of specialty insurance, employing approximately 4,000-4,400 people across 180 countries. The company specializes in tailored underwriting and risk management solutions, with aviation insurance being a key focus area. TMHCC also has specialized divisions for primary and excess casualty, technical property, crop insurance, and cyber and professional lines. The company is recognized for its strong financial ratings, including A++ from AM Best and A+ from S&P Global Ratings. Guided by the vision "To Be a Good Company,"TMHCC emphasizes proactive measures to protect its policyholders.

Industry

insurance

Employees

4,400

134 engineers

Revenue

$7.9B

Website

Visit →

Security at Tokio Marine HCC

Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.

3 Intel Signals

Security Philosophy

Tokio Marine HCC's AppSec philosophy emphasizes shaping and influencing enterprise application security strategy, conducting threat modeling and application architecture reviews, and integrating security testing tools (SAST, DAST, SCA, IAST, secrets scanning) into CI/CD pipelines.
They aim to embed security into development workflows by partnering with DevOps, Infrastructure, and Cloud teams, and to define, advocate for, and implement secure design principles, developing and maintaining secure architecture blueprints and reusable security patterns.
The role also involves influencing the adoption of secure coding practices and requires strong knowledge of web application security principles, including the OWASP Top 10.

Security Team

The AppSec role reports to the Director, Corporate Security Architecture.
Key public-facing leaders include C.
Brad Breau, Senior Vice President and Chief Information Officer, and Grant Reese, Chief Information Security Officer at HCC.
As of, there is 1 active AppSec job posting for an Application Security Architect.

Key Initiatives

Tokio Marine HCC's AppSec initiatives include integrating security into development pipelines and partnering with DevOps, Infrastructure, and Cloud teams to embed security into development workflows. They also conduct threat modeling and application architecture reviews. Information regarding team size, security champions programs, vulnerability management SLAs (MTTR, ticketing ownership, remediation SLAs), and recent initiatives (last 6 months) is not publicly available.

Preparing for an AppSec interview?

Get the weekly briefing 2,000+ security pros trust.

Interested in this role?

Apply on Tokio Marine HCC's site