Associate Information Security Analyst - Security Operations

Universal Health Services; Tredyffrin Township (Chester County); On-site; USD 65,000 - 90,000; Full time

Benefits offered by this job

Health, Dental, Vision

401k plan with company match

Generous Paid Time Off

Excellent Medical Plan

Growth opportunities

Job summary

Universal Health Services is seeking an Associate Information Security Analyst - Security Operations to support the Cybersecurity team in protecting UHS information assets. You will review security alerts, assist with incident response, and maintain documentation while working with UHS entities nationwide.

Ideal candidates hold a bachelor’s degree in CS or IS with a cybersecurity concentration; one year of IT experience is a plus.

Qualifications

• Bachelor's degree in Computer Science or Information Systems, cybersecurity concentration preferred.
• Up to one year IT/Systems experience; or an Associate's with cybersecurity concentration and one year experience may be considered in lieu of the Bachelor's.
• Strong communication and project management skills.

Responsibilities

• System Implementation: Collaborate with users/vendors to refine security specifications and document implementations.
• System Maintenance/Support: Monitor security alerts and dashboards; assist with lifecycle triage and remediation.
• Administration and Oversight: Prepare status reports; maintain regular communications with users and management.
• Travel requirements: Up to 10%.

Skills

Active Directory

IDS/IPS

Web filtering

Vulnerability scanners

Encryption

Security analytics

Forensic analysis

SIEM

CVE databases

Anti-Virus

Device Control

Education

Bachelor's degree in Computer Science or Information Systems

Associate's Degree with cybersecurity concentration + 1 year experience

Job description

Responsibilities

Headquartered in King of Prussia, PA, Universal Health Services, Inc. (NYSE: UHS) is one of the nation's largest and most respected providers of hospital and healthcare services. Since our founding in 1979, UHS has grown steadily into a premier Fortune 500 corporation perennially recognized by multiple esteemed national rating entities. Through its subsidiaries, UHS operates inpatient acute care facilities, inpatient behavioral health facilities, outpatient and other facilities, nationwide virtual behavioral health services, an insurance offering, a physician network and various related services with physical locations in the U.S., Puerto Rico, Ireland and United Kingdom.www.uhs.com.

The Corporate Information Services Department is seeking a dynamic and talented Associate Information Security Analyst - Security Operations.

As a member of the Cybersecurity team, the Associate Information Security Analyst - Security Operations supports and assists with the implementation and maintenance of UHS applications or systems intended to protect the confidentiality, integrity and availability of UHS and affiliates Information Services assets. The candidate will focus on reviewing security alerts, assisting with incident response activities, supporting investigations, and maintaining operational documentation. Monitors the resolution of maintenance or enhancement issues assigned by the UHS Customer Support Center or more senior members of the Information Security Team. Implement modifications to existing applications that will effectively accomplish desired objectives, with guidance from more senior team members. Provides technical support to UHS entities as needed. Meet deadlines and ensure continued progress toward assignment completion. Shares experience with other members of team.

Key responsibilities include:

System Implementation

• Regularly meets with users, vendors, and IS staff to develop/modify system specifications.
• Assists with the implementations of security solutions and prepares the appropriate documentation.
• Researches and resolves technical security-related tickets.
• Adheres to appropriate UHS Project Management standards.
• Ensures strict adherence to work plans, reporting all serious deviations to management.
• Assists with the training of users in operating procedures for security solutions.

System Maintenance/Support

• Researches and resolves tickets including major security solution implementations and upgrades.
• Monitor security alerts and dashboards daily
• Assist with phishing analysis and user-reported security issues
• Perform initial triage and severity assessment of security events.
• Assists with Vendor and Third-Party Risk Management.
• Adheres to UHS Service Level and Change Management Policies.
• Provides on-call support as scheduled.
• Establishes and maintains regular communications with user community.

Administration and Oversight

• Maintains Service Excellence principles.
• Prepares and submits status reports to supervisor as required.
• Keeps management well informed of activities, needs, problems.
• Performs other tasks as required by management.

Qualifications

Position Requirements

Knowledge

• This position requires a Bachelor's degree in Computer Science or Information Systems, with a concentration in cybersecurity highly preferred. No working experience is required. Up to one year of Information Technology or Systems experience would enhance the skills and abilities necessary to perform this job. An Associate's Degree in Computer Science or Information Systems, with a concentration in cybersecurity highly preferred AND one year of relevant Information Technology or Systems experience may be considered in lieu of the Bachelor's degree.

Skills

• Basic understanding of the following or similar information security technologies:
  • Active Directory
  • Intrusion detection/prevention systems (IDS/IPS)
  • Web filtering
  • Vulnerability scanners/remediation
  • Encryption technologies for data at rest and data in transit
  • Mobile device and removable media protection or management systems
  • Forensic analysis
  • Security Information and Event Management (SIEM) systems
  • Common Vulnerabilities and Exposures (CVE) databases
  • Anti-Virus
  • Device Control
• Basic knowledge of information security best practice standards or frameworks.
• Basic knowledge of general IS standards and quality methods and metrics.
• Basic knowledge of project management methods.
• Basic understanding of incident response lifecycle (detect, analyze, contain, remediate).
• Basic knowledge of security vulnerability management.
• Basic knowledge of security penetration testing and ethical hacking best practices.
• Exposure to threat intelligence and log analysis concepts.
• Has a general familiarity with business practices, concepts and terminology sufficient to support the security applications or systems and communicate effectively with colleagues.
• Able to prioritize multiple tasks and be details oriented.
• Excellent communication, interpersonal and project management skills

Travel Requirements: Up to 10%

This opportunity provides the following:

• Challenging and rewarding work environment
• Growth and development opportunities within UHS and its subsidiaries
• Competitive Compensation
• Excellent Medical, Dental, Vision and Prescription Drug Plan
• 401k plan with company match
• Generous Paid Time Off

*UHS is a registered trademark of UHS of Delaware, Inc., the management company for Universal Health Services, Inc. and a wholly‑owned subsidiary of Universal Health Services, Inc. Universal Health Services, Inc. is a holding company and operates through its subsidiaries including its management company, UHS of Delaware, Inc. All healthcare and management operations are conducted by subsidiaries of Universal Health Services, Inc. To the extent any reference to "UHS or UHS facilities" on this website including any statements, articles or other publications contained herein relates to our healthcare or management operations it is referring to Universal Health Services' subsidiaries including UHS of Delaware. Further, the terms "we," "us," "our" or "the company" in such context similarly refer to the operations of Universal Health Services' subsidiaries including UHS of Delaware. Any employment referenced in this website is not with Universal Health Services, Inc. but solely with one of its subsidiaries including but not limited to UHS of Delaware, Inc.

UHS is not accepting unsolicited assistance from search firms for this employment opportunity. Please, no phone calls or emails. All resumes submitted by search firms to any employee at UHS via-email, the Internet or in any form and/or method without a valid written search agreement in place for this position will be deemed the sole property of UHS. No fee will be paid in the event the candidate is hired by UHS as a result of the referral or through other means.

All UHS subsidiaries are committed to providing an environment of mutual respect where equal employment opportunities are available to all applicants and teammates. UHS subsidiaries are equal opportunity employers and as such, openly support and fully commit to recruitment, selection, placement, promotion and compensation of individuals without regard to race, color, religion, age, sex (including pregnancy, gender identity, and sexual orientation), genetic information, national origin, disability status, protected veteran status or any other characteristic protected by federal, state or local laws.

We are aware of a scam whereby imposters are posing as Recruiters from UHS, and our subsidiary hospitals and facilities. Beware of anyone requesting financial or personal information.

At UHS and all our subsidiaries, our Human Resources departments and recruiters are here to help prospective candidates by matching skill set and experience with the best possible career path at UHS and our subsidiaries. During the recruitment process, no recruiter or employee will request financial or personal information (e.g., Social Security Number, credit card or bank information, etc.) from you via email. Our recruiters will not email you from a public webmail client like Hotmail, Gmail, Yahoo Mail, etc.

If you suspect a fraudulent job posting or job-related email mentioning UHS or its subsidiaries, we encourage you to report such concerns to appropriate law enforcement. We encourage you to refer to legitimate UHS and UHS subsidiary career websites to verify job opportunities and not rely on unsolicited calls from recruiters.