Cybersecurity Analyst I

Pine & Harbor Retail Co. is seeking a Cybersecurity Analyst I to support security operations in Atlanta, GA (hybrid). In this role, you will help keep detections actionable by monitoring alerts, investigating suspicious activity, and maintaining clear documentation as incidents move through established response procedures. You will work across security monitoring, endpoint protection, identity, and email security signals, and you will also contribute to vulnerability and access-review activities. A rotating on-call assignment begins after training and includes defined response expectations, escalation paths, and an on-call stipend. What you will do Review and triage alerts from security monitoring, endpoint protection, identity, and email-security tools. Investigate suspicious sign-ins, malware detections, phishing reports, and unusual device activity. Document findings, actions, and escalation decisions in the case-management system. Escalate confirmed or high-risk incidents to senior security team members using established procedures. Support vulnerability findings by helping confirm assigned remediation work is completed. Assist with access reviews, multifactor-authentication administration, and security checks for new systems. Participate in phishing simulations, employee security awareness activities, and incident-response exercises. Maintain investigation guides and recommend improvements when procedures are unclear or incomplete. Coordinate with IT support, infrastructure, and application teams to resolve security issues. What you bring At least 1 year of experience in cybersecurity, IT support, systems administration, network support, or a closely related technical role. Basic understanding of Windows , networking, user accounts, authentication, and common security threats. Ability to review technical information carefully and explain findings clearly in written form. Experience working with tickets, alerts, or documented support procedures. Willingness to participate in the on-call rotation after completing training. Authorization to work in the United States without current or future employer sponsorship. Familiarity with Microsoft Sentinel, Microsoft Defender, Entra ID , Splunk, CrowdStrike, or another SIEM or endpoint-security platform is helpful. Technologies you may work with Microsoft Sentinel, Microsoft Defender, Entra ID, Splunk, CrowdStrike SIEM, endpoint-security, multifactor-authentication Windows, phishing simulations On-call schedule and rotation details After the first 90 days , analysts join an on-call rotation approximately one week every eight weeks . During off-hours high-severity alerts, you respond remotely and can escal to the senior analyst or Security Operations Manager. On-call work typically requires fewer than three hours outside normal hours during an assigned week. Each rotation includes a $300 stipend . If an incident requires substantial overnight work, the following day’s schedule is adjusted in consultation with your manager. Planned maintenance and incident-response exercises may occasionally occur outside regular hours, with advance notice when timing can be planned. Compensation and bonus Base salary: $74,000–$90,000 per year, depending on relevant experience and demonstrated technical skills. Annual bonus: target bonus of 7% based on individual and company performance. Actual bonus payment may range from 0% to 10.5% based on documented individual objectives and company performance. Benefits Medical, dental, and vision coverage with company premium contributions HSA option with an employer contribution Access to virtual primary and mental-health care 401(k) plan with a dollar-for-dollar company match on the first 4% of eligible compensation 17 days of paid time off 10 company holidays Paid sick leave Two company-wide wellness days Twelve weeks of paid parental leave Company-paid life insurance Short- and long-term disability coverage Up to $2,500 annually for approved certifications, technical courses, conferences, and exam fees Dedicated study time for an agreed certification Company-provided laptop and home-office equipment Monthly internet reimbursement An Atlanta public-transit benefit Employee assistance and financial-planning resources Discounts on products sold by Pine & Harbor brands Relocation assistance How success is measured During the first 90 days: complete system training, shadow active investigations, and start handling lower-risk alerts with review from an experienced analyst. By six months: investigate routine alerts independently, recognize when escalation is needed, maintain clear case documentation, and contribute to vulnerability and access-review work. Performance evaluation includes investigation accuracy, appropriate escalation, documentation quality, response times, collaboration, and progress developing technical knowledge. Analysts are not rewarded for closing alerts without adequate review. Hiring process 30-minute introductory call with a Technology Recruiter 45-minute interview with the Security Operations Manager covering technical background, career interests, and on-call availability 60-minute live practical interview using an anonymized sample security alert 45-minute team interview with a Security Analyst and an IT Systems Engineer Final reference checks, followed by a conditional written offer, employment verification, and a standard background check appropriate for a role with access to company systems #J-18808-Ljbffr Cybersecurity Jobs