Principal Cybersecurity Analyst- Penetration Tester (Hybrid)

Publix Super Markets, Inc., the largest employee-owned company in the U.S., is driven by a dynamic technology team of 2,300+ professionals delivering innovative solutions to 1,400+ stores and 260,000+ associates across 8 states.

From IT security and platform engineering to architecture, software development, and infrastructure, we offer career opportunities at every level—internships through technical leadership.

Join a company consistently ranked among Fortune’s “100 Best Companies to Work For” and help us build more than great subs—build the future of technology at Publix.

The Security Threat Management team plays a critical role in protecting Publix systems, data, and operations. Often described as the “offense” side of security, this team proactively looks for weaknesses before bad actors can exploit them, helping Publix stay secure, resilient, and prepared. We’re hiring a Principal Cyber Security Analyst, heavily focused on penetration testing and vulnerability management.

Location

Hybrid (Lakeland, FL): To support our hybrid work model, candidates must reside, or be willing to relocate, within a commutable distance of Lakeland, FL.

Work Model

Enjoy the best of both worlds - collaborate in person and innovate remotely.

Interview Process

Candidates selected to advance in the interview process will be required to participate in at least one onsite interview at our Lakeland, FL campus.

Why Join Us?* Hybrid Flexibility: Work remotely when you need focus time and join us onsite for high-impact collaboration and brainstorming sessions.

• Operational Efficiency: Ensure technology solutions support efficient workflows and enable automation to improve operational effectiveness.
• Cutting-Edge AI Projects: Drive innovation in AI platforms, integrating advanced tools and frameworks to solve complex business challenges.
• Empowered Culture: We value autonomy, creativity, and continuous learning—your ideas shape the future of technology in our organization.

Your Impact* Perform internal and external penetration testing across enterprise networks, applications, APIs, cloud environments, and other technologies to identify exploitable security weaknesses and assess business risk.

• Plan and execute penetration-testing engagements, including technical scoping, Rules of Engagement, reconnaissance, vulnerability discovery, exploitation, validation, and reporting.
• Perform web application and API security assessments using OWASP-based methodologies and industry security-testing best practices.
• Analyze system architecture, network and data flows, security controls, and application functionality to develop comprehensive attack scenarios and ensure appropriate testing coverage.
• Document technical findings, supporting evidence, risk, business impact, and recommended remediation actions, and communicate results to technology owners and management.
• Partner with application, infrastructure, cloud, and engineering teams to remediate identified vulnerabilities, retest corrective actions, and validate successful resolution.
• Support regulatory and risk-driven penetration-testing activities, including PCI, HIPAA, SOX, significant technology changes, and other enterprise security assessments.
• Research emerging attack techniques and security threats, develop and improve offensive-security testing capabilities, and collaborate with internal security teams and specialized third-party testing resources.
• Participate in zero-day analysis and provide direction for mitigation and remediation.
• Provide feedback and recommendations in the vulnerability risk acceptance process for specific vulnerabilities.

#LI-JB1