Cybersecurity Specialist

phigroup; Tempe (AZ); On-site; USD 90,000 - 130,000; Full time

Job summary

PHI Health is seeking a Cybersecurity Specialist to implement and improve the organization's security across enterprise systems, cloud services, endpoints, identities, and networks. The role focuses on reducing risk through monitoring, incident response, and security engineering in a high-demand aviation and healthcare environment.

The successful candidate will lead vulnerability management, oversee security tooling, and collaborate with infrastructure, applications, and operations teams to

Qualifications

• 3–7 years of progressively responsible experience in cybersecurity, systems administration, infrastructure, or security engineering.
• Experience administering enterprise security technologies in Microsoft environments.
• Experience responding to cybersecurity incidents and coordinating containment, eradication and recovery.

Responsibilities

• Implement, maintain, and optimize enterprise cybersecurity technologies across cloud, endpoint, identity, email, and infrastructure platforms.
• Monitor, investigate, and respond to cybersecurity incidents, coordinating containment, eradication, recovery, and post-incident analysis.
• Manage the enterprise vulnerability management program including identification, prioritization, remediation tracking, and reporting.
• Administer and continuously improve Microsoft Defender, Sophos, SecureWorks, and other enterprise security platforms.
• Review security alerts and telemetry to identify threats, suspicious activity, and emerging risks.
• Develop incident response procedures, technical playbooks, and recovery documentation.

Skills

3-7 years cybersecurity experience

Microsoft environments experience

Incident response coordination

Education

Bachelor's degree in Cybersecurity/IT/CS/IS or related field

Tools

Microsoft Defender

Sophos

SecureWorks

Job description

Specialist, Cybersecurity

Join Our Life-Saving Team!

Are you ready to elevate your career to new heights? PHI Health is looking for dynamic, driven individuals to join our team. We are committed to providing top-tier emergency medical services with unmatched speed and efficiency, saving lives when every second counts. By supporting our mission from the ground, you will play a crucial role in orchestrating the seamless operations that keep our advanced fleet soaring and our patients safe.

With PHI Health you'll collaborate with the best minds in the industry, driving initiatives that enhance our services and expand our reach to those who need it most. If you're passionate about making a difference and thrive on challenges, PHI Health offers an extraordinary opportunity to impact lives and develop your professional career in a meaningful way.

Who We Are:

PHI Health is the leading air ambulance provider in the United States. With an unmatched safety record and the best aviation, medical and communication specialists in the field, we set the standard in the air medical industry. We transport more than 22,000 patients each year from our more than 80 bases across the country, all while offering services and outreach education to local communities and leading healthcare systems. Our mission is simple: move communities to health while maintaining the highest standard of safety, period.

Job Summary:

The Cybersecurity Specialist is responsible for implementing, maintaining, and continuously improving the organization's technical cybersecurity capabilities across enterprise systems, cloud services, endpoints, identities, networks, and mission-critical operational environments.

This position serves as the primary technical cybersecurity resource responsible for reducing organizational risk through vulnerability management, security monitoring, incident response, security engineering, and implementation of security controls. The role works closely with infrastructure, applications, operations, and business leaders to ensure security solutions support reliable 24/7 aviation and healthcare operations while meeting regulatory and organizational requirements.

Responsibilities Include:

• Implement, maintain, and optimize enterprise cybersecurity technologies across cloud, endpoint, identity, email, and infrastructure platforms.
• Monitor, investigate, and respond to cybersecurity incidents, coordinating containment, eradication, recovery, and post-incident analysis.
• Manage the enterprise vulnerability management program including vulnerability identification, prioritization, remediation tracking, and reporting.
• Administer and continuously improve Microsoft Defender, Sophos, SecureWorks, and other enterprise security platforms.
• Review security alerts and telemetry from multiple security tools to identify threats, suspicious activity, and emerging risks.
• Perform technical analysis of security events and recommend corrective actions to reduce organizational risk.
• Coordinate and validate remediation activities resulting from penetration tests, vulnerability assessments, and security audits.
• Develop and maintain incident response procedures, technical playbooks, and recovery documentation.
• Partner with Infrastructure and Application teams to implement secure configurations, hardening standards, and technical security controls.
• Evaluate new technologies, software, and cloud services to ensure compliance with enterprise cybersecurity standards.
• Assist with implementation of Zero Trust principles including identity protection, least privilege access, multifactor authentication, and privileged access management.
• Support enterprise email security, endpoint protection, and identity security initiatives.
• Participate in cybersecurity projects including mergers, acquisitions, infrastructure upgrades, cloud migrations, and new technology deployments.
• Conduct forensic investigations and evidence collection during security incidents when appropriate.Assist with disaster recovery, business continuity, and cyber resilience testing activities.
• Maintain technical documentation including system configurations, architecture diagrams, security standards, and operational procedures.
• Participate in after-hours incident response activities when required.
• Provide technical guidance and mentorship to junior cybersecurity personnel.
• Stay current on emerging cybersecurity threats, vulnerabilities, technologies, and industry best practices.

The Successful Candidate Will Have:

Education

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or related field; or equivalent combination of education and experience.

Experience

• Three to seven years of progressively responsible experience in cybersecurity, systems administration, infrastructure, or security engineering.
• Experience administering enterprise security technologies in Microsoft environments.
• Experience responding to cybersecurity incidents and coordinat