Cybersecurity Analyst

Pine & Harbor Retail Co. is seeking a Cybersecurity Analyst I to support security operations in Atlanta, GA (hybrid). In this role, you will help keep detections actionable by monitoring alerts, investigating suspicious activity, and maintaining clear documentation as incidents move through established response procedures.

You will work across security monitoring, endpoint protection, identity, and email security signals, and you will also contribute to vulnerability and access-review activities. A rotating on-call assignment begins after training and includes defined response expectations, escalation paths, and an on-call stipend.

• Review and triage alerts from security monitoring, endpoint protection, identity, and email-security tools.
• Investigate suspicious sign-ins, malware detections, phishing reports, and unusual device activity.
• Document findings, actions, and escalation decisions in the case-management system.
• Escalate confirmed or high-risk incidents to senior security team members using established procedures.
• Support vulnerability findings by helping confirm assigned remediation work is completed.
• Assist with access reviews, multifactor-authentication administration, and security checks for new systems.
• Participate in phishing simulations, employee security awareness activities, and incident-response exercises.
• Maintain investigation guides and recommend improvements when procedures are unclear or incomplete.
• Coordinate with IT support, infrastructure, and application teams to resolve security issues.

• At least 1 year of experience in cybersecurity, IT support, systems administration, network support, or a closely related technical role.
• Basic understanding of Windows
  , networking, user accounts, authentication, and common security threats.
• Ability to review technical information carefully and explain findings clearly in written form.
• Experience working with tickets, alerts, or documented support procedures.
• Willingness to participate in the on-call rotation after completing training.
• Authorization to work in the United States without current or future employer sponsorship.
• Familiarity with Microsoft Sentinel, Microsoft Defender,
  Entra , Splunk, Crowd Strike, or another SIEM or endpoint-security platform is helpful.

• Microsoft Sentinel, Microsoft Defender, Entra , Splunk, Crowd Strike
• SIEM, endpoint-security, multifactor-authentication
• Windows, phishing simulations

• After the first 90 days
  , analysts join an on-call rotation approximately one week every eight weeks
  .
• During off-hours high-severity alerts, you respond remotely and can escal to the senior analyst or Security Operations Manager.
• On-call work typically requires fewer than three hours outside normal hours during an assigned week.
• Each rotation includes a $300 stipend
  .
• If an incident requires substantial overnight work, the following day’s schedule is adjusted in consultation with your manager.
• Planned maintenance and incident-response exercises may occasionally occur outside regular hours, with advance notice when timing can be planned.

• Base salary: $74,000–$90,000 per year, depending on relevant experience and demonstrated technical skills.
• Annual bonus: target bonus of 7% based on individual and company performance.
• Actual bonus payment may range from 0% to 10.5% based on documented individual objectives and company performance.

• Medical, dental, and vision coverage with company premium contributions
• HSA option with an employer contribution
• Access to virtual primary and mental-health care
• 401(k) plan with a dollar-for-dollar company match on the first 4% of eligible compensation
• 17 days of paid time off
• 10 company holidays
• P…