Cybersecurity Specialist

PHI Health, LLC; Tempe (AZ); On-site; USD 95,000 - 135,000; Full time

Job summary

PHI Health, LLC in Tempe, AZ is seeking a Cybersecurity Specialist to implement and improve security across cloud, endpoints, identities, and networks supporting 24/7 aviation and healthcare operations.

You will lead vulnerability management, incident response, and security engineering, collaborating with Infrastructure and Applications teams while aligning with regulatory standards. A bachelor's degree and 3–7 years in security are preferred.

Qualifications

• Bachelor's degree in cybersecurity or related field (or equivalent experience).
• 3–7 years of progressively responsible cybersecurity experience.
• Experience with Microsoft Defender, Entra ID/Azure AD, and cloud security.

Responsibilities

• Implement, maintain and improve security across cloud, endpoints, identities, and networks.
• Monitor, investigate and respond to security incidents; coordinate containment and recovery.
• Lead vulnerability management and remediation tracking.
• Administer Defender, Entra ID/Azure AD, and other security platforms.
• Develop incident response playbooks and participate in post-incident analysis.
• Support zero-trust initiatives, IAM, MFA, and PAM practices.

Skills

Incident response

Vulnerability management

Security monitoring

Microsoft Defender

Azure AD / Entra ID

SIEM

IAM

MFA

PAM

Zero Trust

Endpoint security

Email security

Threat analysis

Education

Bachelor's degree or equivalent in Cybersecurity/IT/CS/IS

Tools

Microsoft Defender Security Suite

Microsoft Entra ID / Azure AD

Microsoft 365 Security

SIEM tools

EDR solutions

SecureWorks

Job description

Specialist, CybersecurityJoin Our Life-Saving Team!Are you ready to elevate your career to new heights? PHI Health is looking for dynamic, driven individuals to join our team. We are committed to providing top-tier emergency medical services with unmatched speed and efficiency, saving lives when every second counts. By supporting our mission from the ground, you will play a crucial role in orchestrating the seamless operations that keep our advanced fleet soaring and our patients safe.With PHI Health you’ll collaborate with the best minds in the industry, driving initiatives that enhance our services and expand our reach to those who need it most. If you're passionate about making a difference and thrive on challenges, PHI Health offers an extraordinary opportunity to impact lives and develop your professional career in a meaningful way.Who We Are:PHI Health is the leading air ambulance provider in the United States. With an unmatched safety record and the best aviation, medical and communication specialists in the field, we set the standard in the air medical industry. We transport more than 22,000 patients each year from our more than 80 bases across the country, all while offering services and outreach education to local communities and leading healthcare systems. Our mission is simple: move communities to health while maintaining the highest standard of safety, period.Job Summary:The Cybersecurity Specialist is responsible for implementing, maintaining, and continuously improving the organization's technical cybersecurity capabilities across enterprise systems, cloud services, endpoints, identities, networks, and mission-critical operational environments.This position serves as the primary technical cybersecurity resource responsible for reducing organizational risk through vulnerability management, security monitoring, incident response, security engineering, and implementation of security controls. The role works closely with infrastructure, applications, operations, and business leaders to ensure security solutions support reliable 24/7 aviation and healthcare operations while meeting regulatory and organizational requirements.Responsibilities Include:Implement, maintain, and optimize enterprise cybersecurity technologies across cloud, endpoint, identity, email, and infrastructure platforms.Monitor, investigate, and respond to cybersecurity incidents, coordinating containment, eradication, recovery, and post-incident analysis.Manage the enterprise vulnerability management program including vulnerability identification, prioritization, remediation tracking, and reporting.Administer and continuously improve Microsoft Defender, Sophos, SecureWorks, and other enterprise security platforms.Review security alerts and telemetry from multiple security tools to identify threats, suspicious activity, and emerging risks.Perform technical analysis of security events and recommend corrective actions to reduce organizational risk.Coordinate and validate remediation activities resulting from penetration tests, vulnerability assessments, and security audits.Develop and maintain incident response procedures, technical playbooks, and recovery documentation.Partner with Infrastructure and Application teams to implement secure configurations, hardening standards, and technical security controls.Evaluate new technologies, software, and cloud services to ensure compliance with enterprise cybersecurity standards.Assist with implementation of Zero Trust principles including identity protection, least privilege access, multifactor authentication, and privileged access management.Support enterprise email security, endpoint protection, and identity security initiatives.Participate in cybersecurity projects including mergers, acquisitions, infrastructure upgrades, cloud migrations, and new technology deployments.Conduct forensic investigations and evidence collection during security incidents when appropriate.Assist with disaster recovery, business continuity, and cyber resilience testing activities.Maintain technical documentation including system configurations, architecture diagrams, security standards, and operational procedures.Participate in after-hours incident response activities when required.Provide technical guidance and mentorship to junior cybersecurity personnel.Stay current on emerging cybersecurity threats, vulnerabilities, technologies, and industry best practices.The Successful Candidate Will Have:EducationBachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or related field; or equivalent combination of education and experience.ExperienceThree to seven years of progressively responsible experience in cybersecurity, systems administration, infrastructure, or security engineering.Experience administering enterprise security technologies in Microsoft environments.Experience responding to cybersecurity incidents and coordinating remediation activities.Experience with vulnerability management programs and security assessment tools.Experience supporting cloud security technologies, preferably Microsoft Azure and Microsoft 365.Experience with endpoint detection and response (EDR), SIEM, email security, and identity management platforms.Experience working in regulated industries such as healthcare, aviation, financial services, or critical infrastructure preferred.Technical KnowledgeMicrosoft Defender Security SuiteMicrosoft Entra ID / Azure Active DirectoryMicrosoft 365 SecuritySIEM and security monitoring platformsVulnerability management toolsIdentity and Access Management (IAM)Multi-factor AuthenticationPrivileged Access ManagementNetwork security principlesEndpoint securityEmail securityNIST Cybersecurity FrameworkSecurity hardening standardsIncident response methodologiesPreferred CertificationsOne or more preferred:Security+CySA+GSECSSCPCISSP (preferred but not required)Microsoft Security CertificationsAzure Security Engineer AssociateSkillsStrong analytical and troubleshooting abilities.Ability to prioritize multiple security initiatives simultaneously.Excellent written and verbal communication skills.Ability to explain technical concepts to non-technical audiences.Strong documentation skills.Ability to work independently with minimal supervision.Excellent organizational and project management skills.Schedule/Location:5&2Phoenix, AZCompensation and Benefits:We offer a range of competitive pay and benefits package to keep our teams happy, healthy, and invested.Our Core Competencies:Safe. We are absolute in our belief in the tenets of Destination Zero and that Zero is not only achievable, but the only acceptable outcome.Efficient. We are focused on outcomes that are smart and responsible by making the best use of our resources to maximize overall productivity and achieve sustainable profitability as a high performing organization.Quality. We are committed to ensuring excellent organizational performance which produces sustainable and reliable outcomes.Service. We are dedicated to the service of our customers, our communities and each other.Behavioral Competencies:Show Real Grit - With safety as your guide, you pursue every task with drive, energy and a commitment to finish. You give all that the situation requires, even in the face of resistance or setbacks. You serve with resiliency, determined to help others.Perform with Integrity – You always do what’s right.Be a great team player - In order to achieve the best possible outcomes for our patients and customers, you must treat others with dignity and respect, and be committed to working as a cohesive team toward a common purpose.Give and Get Help - Giving your all in the service of others can tax your wellbeing. Know the signs and have the courage to give help and get help when needed.The PHI Health Advantage:For more than 40 years, our company has been providing critical air medical transport services across the country. As an organization, we outfit each aircraft we fly with the most advanced technology, subject our crews to the most rigorous protocols and training and pioneer the most-forward thinking safety program in the country.Everything that we do comes back to the safety of our crew and our patients. Our accident rate is well below the national average, and we were the first to receive the Vision Zero Aviation Safety Award. This belief has guided us towards a number of industry firsts and has given us the highest safety rating in the industry.DuplicateDISCLAIMERThe above Statements are intended to describe the general nature and level of work being performed by people assigned to this classification. They are not intended to be construed, as an exhaustive list of all responsibilities, duties, and skills required of personnel so classified.PHI, Inc. provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws