Specialist, Cybersecurity

Join Our Life-Saving Team!

The Cybersecurity Specialist is responsible for implementing, maintaining, and continuously improving the organization's technical cybersecurity capabilities across enterprise systems, cloud services, endpoints, identities, networks, and mission-critical operational environments.

This position serves as the primary technical cybersecurity resource responsible for reducing organizational risk through vulnerability management, security monitoring, incident response, security engineering, and implementation of security controls. The role works closely with infrastructure, applications, operations, and business leaders to ensure security solutions support reliable 24/7 aviation and healthcare operations while meeting regulatory and organizational requirements.

Responsibilities Include:

• Implement, maintain, and optimize enterprise cybersecurity technologies across cloud, endpoint, identity, email, and infrastructure platforms.
• Monitor, investigate, and respond to cybersecurity incidents, coordinating containment, eradication, recovery, and post-incident analysis.
• Manage the enterprise vulnerability management program including vulnerability identification, prioritization, remediation tracking, and reporting.
• Administer and continuously improve Microsoft Defender, Sophos, SecureWorks, and other enterprise security platforms.
• Review security alerts and telemetry from multiple security tools to identify threats, suspicious activity, and emerging risks.
• Perform technical analysis of security events and recommend corrective actions to reduce organizational risk.
• Coordinate and validate remediation activities resulting from penetration tests, vulnerability assessments, and security audits.
• Develop and maintain incident response procedures, technical playbooks, and recovery documentation.
• Partner with Infrastructure and Application teams to implement secure configurations, hardening standards, and technical security controls.
• Evaluate new technologies, software, and cloud services to ensure compliance with enterprise cybersecurity standards.
• Assist with implementation of Zero Trust principles including identity protection, least privilege access, multifactor authentication, and privileged access management.
• Support enterprise email security, endpoint protection, and identity security initiatives.
• Participate in cybersecurity projects including mergers, acquisitions, infrastructure upgrades, cloud migrations, and new technology deployments.
• Conduct forensic investigations and evidence collection during security incidents when appropriate.Assist with disaster recovery, business continuity, and cyber resilience testing activities.
• Maintain technical documentation including system configurations, architecture diagrams, security standards, and operational procedures.
• Participate in after-hours incident response activities when required.
• Provide technical guidance and mentorship to junior cybersecurity personnel.
• Stay current on emerging cybersecurity threats, vulnerabilities, technologies, and industry best practices.

The Successful Candidate Will Have:

• Education

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or related field; or equivalent combination of education and experience.

• Experience

• Three to seven years of progressively responsible experience in cybersecurity, systems administration, infrastructure, or security engineering.
• Experience administering enterprise security technologies in Microsoft environments.
• Experience responding to cybersecurity incidents and coordinating remediation activities.
• Experience with vulnerability management programs and security assessment tools.
• Experience supporting cloud security technologies, preferably Microsoft Azure and Microsoft 365.
• Experience with endpoint detection and response (EDR), SIEM, email security, and identity management platforms.
• Experience working in regulated industries such as healthcare, aviation, financial services, or critical infrastructure preferred.

• Technical Knowledge

• Microsoft Defender Security Suite
• Microsoft Entra ID / Azure Active Directory
• Microsoft 365 Security
• SIEM and security monitoring platforms
• Vulnerability management tools
• Identity and Access Management (IAM)
• Multi-factor Authentication
• Privileged Access Management
• Network security principles
• Endpoint security
• Email security
• NIST Cybersecurity Framework
• Security hardening standards
• Incident response methodologies

• Preferred Certifications

  One or more preferred:

• Security+
• CySA+
• GSEC
• SSCP
• CISSP (preferred but not required)
• Microsoft Security Certifications
• Azure Security Engineer Associate

• Skills

• Strong analytical and troubleshooting abilities.
• Ability to prioritize multiple security initiatives simultaneously.
• Excellent written and verbal communication skills.
• Ability to explain technical concepts to non-technical audiences.
• Strong documentation skills.
• Ability to work independently with minimal supervision.
• Excellent organizational and project management skills.

Schedule/Location:

• 5&2

• Phoenix, AZ

Compensation and Benefits:

• We offer a range of competitive pay and benefits package to keep our teams happy, healthy, and invested.

Our Core Competencies:

• Safe. We are absolute in our belief in the tenets of Destination Zero and that Zero is not only achievable, but the only acceptable outcome.

• Efficient. We are focused on outcomes that are smart and responsible by making the best use of our resources to maximize overall productivity and achieve sustainable profitability as a high performing organization. 

• Quality. We are committed to ensuring excellent organizational performance which produces sustainable and reliable outcomes.

• Service. We are dedicated to the service of our customers, our communities and each other.

Behavioral Competencies:

• Show Real Grit - With safety as your guide, you pursue every task with drive, energy and a commitment to finish. You give all that the situation requires, even in the face of resistance or setbacks. You serve with resiliency, determined to help others.
• Perform with Integrity – You always do what’s right.
• Be a great team player - In order to achieve the best possible outcomes for our patients and customers, you must treat others with dignity and respect, and be committed to working as a cohesive team toward a common purpose.
• Give and Get Help - Giving your all in the service of others can tax your wellbeing. Know the signs and have the courage to give help and get help when needed.

The PHI Health Advantage:

For more than 40 years, our company has been providing critical air medical transport services across the country. As an organization, we outfit each aircraft we fly with the most advanced technology, subject our crews to the most rigorous protocols and training and pioneer the most-forward thinking safety program in the country.

Everything that we do comes back to the safety of our crew and our patients. Our accident rate is well below the national average, and we were the first to receive the Vision Zero Aviation Safety Award. This belief has guided us towards a number of industry firsts and has given us the highest safety rating in the industry.

DISCLAIMER

The above Statements are intended to describe the general nature and level of work being performed by people assigned to this classification. They are not intended to be construed, as an exhaustive list of all responsibilities, duties, and skills required of personnel so classified.