Skip to main content

Empowering next-level security innovation.

Enable extraordinary moments.

Incident Response and Forensics Consultant III

Primary Location Greensboro, North Carolina Schedule Full-time Shift Day Salary $103700 - $125000 / year
Job Number 1419351 Date posted 04/24/2026
Submit Interest

Looking for the future of health care cyber security? You’ll find it at the Kaiser Permanente Cyber Risk Defense Center (CRDC). We provide around-the-clock monitoring, intelligence, and incident response that help identify potential threats, assess the risk, and continually evolve our detection and response capabilities. Our goal is simple – to keep Kaiser Permanente’s operations running while protecting the information of our members, care teams, brokers, and employees. Our security teams provide continuous monitoring, threat intelligence, and incident response to identify potential threats, assess the risk, and continually evolve detection and response capabilities. We work closely with organizations and business partners throughout Kaiser Permanente, as well as external vendors and alliance business partners, to drive security innovation that enables health care delivery for the next generation.
Members of the Kaiser Permanente Cyber team work closely with engineers, developers, and leadership to operate and improve our cyber capabilities. We highly value collaboration and work to deliver cyber security best practices, operational capabilities, all in a cross functional, agile environment. Join us for the opportunity to define what cyber security looks like in digital health and make an impact along the way.

  • Job Type:Standard
  • Job Level:Individual Contributor
  • Travel:No

Success Profile

These are the traits of the most successful members of our cyber team.

  • Versatile
  • Detail-oriented
  • Proactive
  • Positive
  • Diplomatic
  • Skilled Communicator

Benefits

Our compensation and benefits are designed to help you and your family stay healthy and thrive in and beyond work.

Our Culture

The Kaiser Permanente Cyber experience is people-centric. Our cyber team secures and defends a digital ecosystem that delivers care to more than 12 million members and their families. We keep our operations running while protecting the information of our members, care teams, brokers, and employees. Cyber team members are agile, have a sharp attention to detail, and apply creative, out-of-the-box thinking.

Hear From Our People

Cecily

Cecily

Senior Analyst,

Threat Detection Operations

I am proud to have served my country and working at Kaiser Permanente allows me to feel like I am continuing a commitment to service. It feels great to work for a company that values my military experience and to be able to work with many other veterans.

Incident Response and Forensics Consultant III

Primary Location Greensboro, North Carolina Schedule Full-time Shift Day Salary $103700 - $125000 / year
Job Number 1419351 Date Posted 04/22/2026
Submit Interest
Description:
Kaiser Permanente can only employ candidates who reside in, or have firm plans to relocate (without relocation assistance), to North Carolina, California, Colorado, District of Columbia, Georgia, Hawaii, Maryland, New York, Oregon, Virginia, or Washington.
Job Summary:
The Incident Handler supports the monitoring, investigation, and triage of cybersecurity events across the enterprise by applying established procedures and security practices. This role conducts analysis of security alerts and incidents within an assigned domain, helping to identify potential threats, determine scope and impact, and support appropriate containment and remediation activities. The position collaborates with cross-functional Cyber Risk Defense Center teams to communicate findings, support incident response processes, and contribute to ongoing security operations and escalation efforts. This role also assists in identifying opportunities to improve security posture and participates in follow-up remediation and documentation activities to strengthen overall cyber defense capabilities.

This individual contributor is primarily responsible for supporting the protection and maintenance of integrity and reliability of the security of data, systems and networks, while resolving problems with tools, systems and procedures.


Essential Responsibilities:
  • Completes work assignments by applying up-to-date knowledge in subject area to meet deadlines; following procedures and policies, and applying data and resources to support projects or initiatives; collaborating with others, often cross-functionally, to solve business problems; supporting the completion of priorities, deadlines, and expectations; communicating progress and information; identifying and recommending ways to address improvement opportunities when possible; and escalating issues or risks as appropriate.
  • Pursues self-development and effective relationships with others by sharing resources, information, and knowledge with coworkers and customers; listening, responding to, and seeking performance feedback; acknowledging strengths and weaknesses; assessing and responding to the needs of others; and adapting to and learning from change, difficulties, and feedback.
  • Provides proactive monitoring and/or response to known or emerging threats against the KP network.
  • Effectively communicates investigative findings to non-technical audiences.
  • Participates in regular operations meeting with Cyber Risk Defense Center (CRDC) teams.
  • Identifies opportunities for cyber security improvements within assigned cyber defense domain.
  • Works with the CRDC Policy Engineers and Remediation teams to contain identified issues and determine the best approach for improving security posture.
  • Participates in follow-up remediation design and review.
  • Conducts investigation and triage of security events within assigned domain.
  • Performs data analysis in support of security event management processes, including root cause analysis.
  • Provides on-call duties and after hours support of incident management as required.
  • Supports incident response plans which may include after-hours support and coordination among responsible teams.
  • Assists in the execution of incident handling processes which may include containment, protection, and remediation activities.
Minimum Qualifications:

  • Bachelors degree in Business Administration, Computer Science, Social Science, Mathematics, or related field and Minimum three (3) years experience in IT or a related field, including Minimum one (1) year in information security or network engineering. Additional equivalent work experience may be substituted for the degree requirement.

Preferred Qualifications:
  • Two (2) years experience working on project or technical teams.
  • One (1) year work experience requiring the development of technical documents or presentations.
Primary Location: North Carolina,Greensboro,Greensboro Administration
Additional Locations:
  • Pleasanton
  • Honolulu
  • Portland
  • Pasadena
  • Greenwood Village
  • Atlanta
  • Duluth
  • Hyattsville
  • Renton
Scheduled Weekly Hours: 40 Shift: Day Workdays: Mon, Tue, Wed, Thu, Fri Working Hours Start: 08:00 AM Working Hours End: 05:00 PM Job Schedule: Full-time Job Type: Standard Worker Location: Flexible Employee Status: Regular Employee Group/Union Affiliation: NUE-IT-01|NUE|Non Union Employee Job Level: Individual Contributor Department: KPIT ADMIN - TRO CRDC - 9601 Pay Range: $103700 - $125000 / year Kaiser Permanente strives to offer a market competitive total rewards package and is committed to pay equity and transparency. The posted pay range is based on possible base salaries for the role and does not reflect the full value of our total rewards package. Actual base pay determined at offer will be based on labor market data and a candidate's years of relevant work experience, education, certifications, skills, and geographic location. Travel: No Flexible: Work location is on-site at a KP location, with the flexibility to work from home. Worker location must align with Kaiser Permanente's Authorized States policy. Kaiser Permanente is an equal opportunity employer committed to fair, respectful, and inclusive workplaces. Applicants will be considered for employment without regard to race, religion, sex, age, national origin, disability, veteran status, or any other protected characteristic or status.
Submit Interest

Expected Employee Conduct >

Navigating the Hiring Process

We're here to support you!

Having trouble with your account or have questions on the hiring process?

Please visit the FAQ page on our website for assistance.

Need help with your computer and browser settings?

Please visit the Technical Information page for assistance or reach out to the web manager at kp-hires@kp.org.

Do you need a reasonable accommodation due to a disability?

Reasonable accommodations may be available to facilitate access to, or provide modifications to the following:

  • Online Submissions
  • Pre-Hire Assessments
  • Interview Process

If you have a disability-related need for accommodation, please submit your accommodation request and someone will contact you.

Join Our Talent Network
Explore This Location
View Stories and Resources

Industry Leader

Securing what's next for care

Working closely with partners throughout Kaiser Permanente, as well as other organizations, we drive security innovation that enables health care delivery.

Our Events

Want to talk to a member of the Kaiser Permanente team? Meet us at an upcoming hiring event.

See All Events

Loading Events...

Jobs For You

You have no recently viewed jobs

You currently have no saved jobs

A Women standing near wall

Join Our Talent Community

Join our Talent Network today to receive email notifications about our career opportunities that match your skills.

Sign Up