> Markdown version of [/jobs/ext/4184079-cybersecurity-analyst-i](https://www.wearedevelopers.com/jobs/ext/4184079-cybersecurity-analyst-i). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cybersecurity Analyst I - **Company:** PINES HARBOR REALTY LTD - **Location:** Atlanta, GA, United States (Remote available) - **Experience:** Starter - **Salary:** $74,000 - $90,000 - **Contract:** Internship / Graduate position - **Skills:** Microsoft Windows, User Authentication, Cyber Security, Multi-Factor Authentication, Anti-Phishing, Security Information and Event Management, EndPointSecurity, Information Technology, Network Support, Microsoft Sentinel, Splunk, User Accounts - **Published:** October 12, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=13f8b140234d1251 ## About the Role * At least one year of experience in cybersecurity, IT support, systems administration, network support, or another relevant technical role. * Basic understanding of Windows, networking, user accounts, authentication, and common security threats. * Ability to review technical information carefully and explain findings in clear written language. * Experience working with tickets, alerts, or documented support procedures. * Willingness to participate in the on-call rotation after completing training. * Authorization to work in the United States without current or future employer sponsorship. A bachelor's degree is not required. Relevant coursework, military training, internships, certifications, and practical IT experience may be considered together. Familiarity with Microsoft Sentinel, Microsoft Defender, Entra ID, Splunk, CrowdStrike, or another SIEM or endpoint-security platform is helpful. Security+, Network+, or an equivalent foundational certification is preferred but not required. ## Description Pine & Harbor is hiring a Cybersecurity Analyst I to help monitor security alerts, investigate suspicious activity, and protect the systems used by employees, customers, and distribution facilities. You will work with experienced security and IT professionals who can provide guidance during complex investigations. The position is suitable for someone moving into cybersecurity from IT support, network administration, a security internship, military technology work, or an accredited training program. What you will do * Review and triage alerts from the company's security monitoring, endpoint-protection, identity, and email-security tools. * Investigate suspicious sign-ins, malware detections, phishing reports, and unusual device activity. * Document findings, actions, and escalation decisions in the case-management system. * Escalate confirmed or high-risk incidents to senior security team members using established procedures. * Help manage vulnerability findings and confirm that assigned remediation work has been completed. * Support access reviews, multifactor-authentication administration, and security checks for new systems. * Participate in phishing simulations, employee security awareness activities, and incident-response exercises. * Maintain investigation guides and recommend improvements when procedures are unclear or incomplete. * Work with IT support, infrastructure, and application teams to resolve security issues., After the first 90 days, analysts join an on-call rotation approximately one week every eight weeks. The assigned analyst responds remotely to high-severity alerts outside regular business hours and can escalate incidents to the senior analyst or Security Operations Manager. On-call activity typically requires fewer than three hours of work outside normal hours during an assigned week. Each rotation includes a $300 stipend. When an incident requires substantial overnight work, the following day's schedule is adjusted in consultation with the manager. Planned maintenance and incident-response exercises may occasionally take place outside regular hours. Employees receive advance notice whenever the timing can be planned. What success looks like During the first 90 days, you will complete system training, shadow active investigations, and begin handling lower-risk alerts with review from an experienced analyst. By six months, you should be able to independently investigate routine alerts, recognize when an issue needs escalation, maintain clear case documentation, and contribute to vulnerability and access-review work. Performance is evaluated through investigation accuracy, appropriate escalation, documentation quality, response times, collaboration, and progress in developing technical knowledge. Analysts are not rewarded for closing alerts without adequate review.