Application Security Consultant III: Secure SDLC & DevOps

Kaiser Permanente; Greensboro, Northern (NC, KY); Ibrido; USD 90.000 - 120.000; Tempo pieno

Descrizione del lavoro

Kaiser Permanente is seeking an IS Consultant III, Application Security in Greensboro, NC. The role performs source code reviews, manual and automated security testing, vulnerability assessments, and security data analysis for moderately complex initiatives.

You will work with developers, DevOps, risk teams, and business stakeholders to integrate security services and provide remediation guidance. Responsibilities include reviewing code for vulnerabilities, training DevOps and developers on

Competenze

• Minimum 2 years software or application development experience.
• Bachelor's degree in Business Admin, CS, Social Science, Mathematics, or related field with 3+ years IT or related field, including 1 year in information security.

Mansioni

• Completes work assignments by applying current knowledge and collaborating cross-functionally.
• Pursues self-development and builds effective relationships.
• Effectively communicates investigative findings to non-technical audiences.
• Works with technology risk teams and stakeholders to remediate issues.
• Provides recommendations to leadership on remediation.
• Follows processes to ensure KPI goals and metrics are tracked.
• Supports standardized security tools, templates, and processes.
• Performs security test data analysis and root-cause analysis.
• Executes vulnerability assessment and penetration testing plans across multiple IT domains.
• Researches industry trends and recommends security solutions.
• Generates scheduled security reports and metrics.

Conoscenze

Software development

Security testing

Collaboration

Formazione

Bachelor's degree in Business Admin/CS/Social Science/Math or related field

Descrizione del lavoro

Kaiser Permanente is seeking an IS Consultant III, Application Security in Greensboro, NC. The role performs source code reviews, manual and automated security testing, vulnerability assessments, and security data analysis for moderately complex initiatives.

You will work with developers, DevOps, risk teams, and business stakeholders to integrate security services and provide remediation guidance. Responsibilities include reviewing code for vulnerabilities, training DevOps and developers on