Cybersecurity Consultant III, Application Security

Kaiser Permanente's Greensboro security team is seeking a Cybersecurity Consultant III, Application Security to help safeguard its applications. This onsite role centers on evaluating and testing software for vulnerabilities using both manual techniques and automated tools, including DAST and code reviews, while guiding DevOps and development teams. You will provide remediation guidance and training, and work to protect production applications through continuous assessment and tuning of web application defenses.

Location: Greensboro, NC (onsite) • Salary: USD 98,800 per year • Experience: 3+ years in IT or related field, including at least 1 year in information security, network engineering, or application development • Education: Bachelor's degree in Business Administration, Computer Science, Social Science, Mathematics, or related field.

Responsibilities

• Completes work assignments by applying up-to-date knowledge in the subject area to meet deadlines.
• Follows procedures and policies, leveraging data and resources to support projects or initiatives.
• Collaborates with cross-functional teams to solve business problems.
• Supports the completion of priorities, deadlines, and expectations.
• Communicates progress and information to stakeholders.
• Identifies and recommends improvements when opportunities arise.
• Escalates issues or risks as appropriate.
• Pursues self-development and shares resources and knowledge with coworkers and customers.
• Listens for feedback, responds to it, and seeks performance insights.
• Acknowledges strengths and weaknesses and adjusts accordingly.
• Assesses and responds to the needs of others.
• Adapts to change and learns from difficulties and feedback.
• Effectively communicates investigative findings to non-technical audiences.
• Works with technology risk teams and business stakeholders to respond to and remediate identified issues, determining the best approach to improve security posture.
• Provides recommendations to leadership on remediation strategies based on security testing results.
• Identifies the impact of security test plans on upstream and downstream solution components.
• Follows established processes to ensure KPI goals are met and performance metrics are tracked over time.
• Supports continuous process improvement by contributing to standardized security tools, templates, and processes across assigned domains.
• Performs security test data analysis to support vulnerability assessment processes, including root cause analysis.
• Executes vulnerability assessment and penetration testing plans, methodologies, and standard processes for moderately complex technology initiatives across multiple IT domains by analyzing business and technology requirements.
• Stays current on industry trends, emerging threats, best practices, and advanced techniques to identify and exploit vulnerabilities and recommend security solutions for technology systems.
• Generates scheduled reports (status updates, risk assessments, remediation reports) and provides regular security metrics to IT teams as appropriate.

Requirements

• Minimum two (2) years of software or application development experience.
• Bachelor's degree in Business Administration, Computer Science, Social Science, Mathematics, or a related field.
• Minimum three (3) years of experience in IT or a related field, including at least one (1) year in information security, network engineering, or application development.
• Additional equivalent work experience may be substituted for the degree requirement.

Additional Requirements

N/A