Senior Information Security Analyst - Cloud and AI Security

One of the nation’s largest and most respected providers of hospital and healthcare services, Universal Health Services, Inc. (UHS) has built an impressive record of achievement and performance. Growing steadily since its inception into an esteemed Fortune 500® corporation, annual revenues during 2025 were $17.4 billion. In 2026, UHS was again recognized as one of Fortune World’s Most Admired Companies™ and in 2025, was listed in Forbes ranking of America’s Largest Public Companies. Headquartered in King of Prussia, PA, UHS has approximately 101,500 employees and continues to grow through its subsidiaries. Operating acute care hospitals, behavioral health facilities, outpatient facilities and ambulatory care access points, an insurance offering, a physician network and various related services located in 40 U.S. states, Washington, D.C., Puerto Rico and the United Kingdom. For additional information visit www.uhs.com. The Corporate Information Services Department is seeking a dynamic and talented Sr. Information Security Analyst-Application Security. As a key member of our collaborative Cybersecurity team, the Senior Information Security Analyst will serve as a technical lead for securing applications, AI-enabled solutions, and autonomous AI agents across UHS and affiliates. In this role, you will identify, assess, document, and mitigate security vulnerabilities in our traditional and AI-powered applications, guide secure development practices, and partner with architecture, development, infrastructure, and business teams to embed security throughout the software development lifecycle (SDLC) and across emerging AI workflows. Provide technical guidance and independent validation while platform and application owners retain operational responsibility. Works with technical and non-technical staff to ensure that deployed technologies are effectively and efficiently providing the intended controls consistent with established policies and procedures. Where appropriate, trains and supports technical staff in UHS affiliated locations to deploy, manage, and support selected technologies. Adheres to UHS standards of service excellence, professionalism, and integrity while performing duties. Key responsibilities include: Maintains selected information security technologies within guidelines of policies and in keeping with good project management principles. Monitors the resolution of maintenance or enhancement issues assigned by the UHS Customer Support Center. Lead and perform in-depth security assessments of web, mobile, API, cloud-based, and AI-enabled applications and autonomous AI agents through code reviews, using tools such as SAST, DAST, IAST, SCA, manual techniques, and penetration testing, including adversarial AI testing (prompt injection, jailbreak and guardrail bypass, model poisoning, RAG and MCP review, and AI agent abuse). Periodically reviews deployed security technologies to ensure that the solutions continue to provide the intended protections efficiently and effectively. Work closely with DevOps and engineering teams to integrate security into CI/CD pipelines (DevSecOps) and AI/ML pipelines, and develop secure coding guidance, AI security standards, and runtime control baselines. Identifies gaps in protection and recommends solutions to remediate or mitigate the risks associated with the protection gaps. Document findings and assist in creating reports and metrics for technical and non-technical audiences. Works with staff at all levels in the organization, vendors and contractors to ensure protections are effective, efficient and non-disruptive to the appropriate duties, rights and mission of the individuals and the organization(s) affected. Acts as the subject matter expert (SME) for at least one technology or process, and guides the efforts of 1-3 less experienced staff who assist with the assigned technology or process. Monitors the resolution of maintenance or enhancement issues