Cybersecurity Analyst I

Pine & Harbor Retail Co. is seeking a Cybersecurity Analyst I to support security operations in Atlanta, GA (hybrid). In this role, you will help keep detections actionable by monitoring alerts, investigating suspicious activity, and maintaining clear documentation as incidents move through established response procedures.

You will work across security monitoring, endpoint protection, identity, and email security signals, and you will also contribute to vulnerability and access-review activities. A rotating on-call assignment begins after training and includes defined response expectations, escalation paths, and an on-call stipend.

What you will do

• Review and triage alerts from security monitoring, endpoint protection, identity, and email-security tools.
• Investigate suspicious sign-ins, malware detections, phishing reports, and unusual device activity.
• Document findings, actions, and escalation decisions in the case-management system.
• Escalate confirmed or high-risk incidents to senior security team members using established procedures.
• Support vulnerability findings by helping confirm assigned remediation work is completed.
• Assist with access reviews, multifactor-authentication administration, and security checks for new systems.
• Participate in phishing simulations, employee security awareness activities, and incident-response exercises.
• Maintain investigation guides and recommend improvements when procedures are unclear or incomplete.
• Coordinate with IT support, infrastructure, and application teams to resolve security issues.

What you bring

• At least 1 year of experience in cybersecurity, IT support, systems administration, network support, or a closely related technical role.
• Basic understanding of Windows, networking, user accounts, authentication, and common security threats.
• Ability to review technical information carefully and explain findings clearly in written form.
• Experience working with tickets, alerts, or documented support procedures.
• Willingness to participate in the on-call rotation after completing training.
• Authorization to work in the United States without current or future employer sponsorship.
• Familiarity with Microsoft Sentinel, Microsoft Defender, Entra ID, Splunk, CrowdStrike, or another SIEM or endpoint-security platform is helpful.

Technologies you may work with

• Microsoft Sentinel, Microsoft Defender, Entra ID, Splunk, CrowdStrike
• SIEM, endpoint-security, multifactor-authentication
• Windows, phishing simulations

On-call schedule and rotation details

• After the first 90 days, analysts join an on-call rotation approximately one week every eight weeks.
• During off-hours high-severity alerts, you respond remotely and can escalate to the senior analyst or Security Operations Manager.
• On-call work typically requires fewer than three hours outside normal hours during an assigned week.
• Each rotation includes a $300 stipend.
• If an incident requires substantial overnight work, the following day’s schedule is adjusted in consultation with your manager.
• Planned maintenance and incident-response exercises may occasionally occur outside regular hours, with advance notice when timing can be planned.

Compensation and bonus

• Base salary: $74,000–$90,000 per year, depending on relevant experience and demonstrated technical skills.
• Annual bonus: target bonus of 7% based on individual and company performance.
• Actual bonus payment may range from 0% to 10.5% based on documented individual objectives and company performance.

Benefits

• Medical, dental, and vision coverage with company premium contributions
• HSA option with an employer contribution
• Access to virtual primary and mental-health care
• 401(k) plan with a dollar-for-dollar company match on the first 4% of eligible compensation
• 17 days of paid time off
• 10 company holidays
• Paid sick leave
• Two company-wide wellness days
• Twelve weeks of paid parental leave
• Company-paid life insurance
• Short- and long-term disability coverage
• Up to $2,500 annually for approved certifications, technical courses, conferences, and exam fees
• Dedicated study time for an agreed certification
• Company-provided laptop and home-office equipment
• Monthly internet reimbursement
• An Atlanta public-transit benefit
• Employee assistance and financial-planning resources
• Discounts on products sold by Pine & Harbor brands
• Relocation assistance

How success is measured

• During the first 90 days: complete system training, shadow active investigations, and start handling lower-risk alerts with review from an experienced analyst.
• By six months: investigate routine alerts independently, recognize when escalation is needed, maintain clear case documentation, and contribute to vulnerability and access-review work.
• Performance evaluation includes investigation accuracy, appropriate escalation, documentation quality, response times, collaboration, and progress developing technical knowledge.
• Analysts are not rewarded for closing alerts without adequate review.

Hiring process

• 30-minute introductory call with a Technology Recruiter
• 45-minute interview with the Security Operations Manager covering technical background, career interests, and on-call availability
• 60-minute live practical interview using an anonymized sample security alert
• 45-minute team interview with a Security Analyst and an IT Systems Engineer
• Final reference checks, followed by a conditional written offer, employment verification, and a standard background check appropriate for a role with access to company systems