Principal Cybersecurity Analyst- Penetration Tester (Hybrid)

DescriptionPublix Super Markets, Inc., the largest employee-owned company in the U.S., is driven by a dynamic technology team of 2,300+ professionals delivering innovative solutions to 1,400+ stores and 260,000+ associates across 8 states.From IT security and platform engineering to architecture, software development, and infrastructure, we offer career opportunities at every level—internships through technical leadership.Join a company consistently ranked among Fortune’s “100 Best Companies to Work For” and help us build more than great subs—build the future of technology at Publix.The Security Threat Management team plays a critical role in protecting Publix systems, data, and operations. Often described as the “offense” side of security, this team proactively looks for weaknesses before bad actors can exploit them, helping Publix stay secure, resilient, and prepared. We’re hiring a Principal Cyber Security Analyst, heavily focused on penetration testing and vulnerability management. Location: Hybrid (Lakeland, FL): To support our hybrid work model, candidates must reside, or be willing to relocate, within a commutable distance of Lakeland, FL.Work Model: Enjoy the best of both worlds - collaborate in person and innovate remotely. Interview Process: Candidates selected to advance in the interview process will be required to participate in at least one onsite interview at our Lakeland, FL campus. Why Join Us?Hybrid Flexibility: Work remotely when you need focus time and join us onsite for high-impact collaboration and brainstorming sessions. Operational Efficiency: Ensure technology solutions support efficient workflows and enable automation to improve operational effectiveness.Cutting-Edge AI Projects: Drive innovation in AI platforms, integrating advanced tools and frameworks to solve complex business challenges. Empowered Culture: We value autonomy, creativity, and continuous learning—your ideas shape the future of technology in our organization.Your ImpactPerform internal and external penetration testing across enterprise networks, applications, APIs, cloud environments, and other technologies to identify exploitable security weaknesses and assess business risk. Plan and execute penetration-testing engagements, including technical scoping, Rules of Engagement, reconnaissance, vulnerability discovery, exploitation, validation, and reporting. Perform web application and API security assessments using OWASP-based methodologies and industry security-testing best practices. Analyze system architecture, network and data flows, security controls, and application functionality to develop comprehensive attack scenarios and ensure appropriate testing coverage. Document technical findings, supporting evidence, risk, business impact, and recommended remediation actions, and communicate results to technology owners and management. Partner with application, infrastructure, cloud, and engineering teams to remediate identified vulnerabilities, retest corrective actions, and validate successful resolution. Support regulatory and risk-driven penetration-testing activities, including PCI, HIPAA, SOX, significant technology changes, and other enterprise security assessments. Research emerging attack techniques and security threats, develop and improve offensive-security testing capabilities, and collaborate with internal security teams and specialized third-party testing resources.Participate in zero-day analysis and provide direction for mitigation and remediation. Provide feedback and recommendations in the vulnerability risk acceptance process for specific vulnerabilities.#LI-JB1Required QualificationsBachelor’s degree in computer science, information technology, or a related analytical field, or equivalent experience6+ years of cybersecurity or information technology experience 4+ years of hands-on penetration testing, offensive security, application security testing, vulnerability assessment, or an equivalent technical security role.Hands-on experience performing penetration testing against two or more of the following: enterprise networks, Windows/Linux systems, Active Directory, web applications, APIs, or cloud environments.Working knowledge of penetration-testing tools and platforms such as Burp Suite, Kali Linux, Nmap, Metasploit, BloodHound, Nessus/Tenable, Wireshark, or comparable tools.Experience identifying, validating, documenting, and communicating security vulnerabilities, including determining technical risk, business impact, and practical remediation recommendations.Working knowledge of common penetration-testing methodologies and security frameworks, including OWASP Web Security Testing Guide/OWASP Top 10, MITRE ATT&CK, CVE/CVSS, and industry-standard penetration-testing practices.Preferred QualificationsExperience conducting advanced Active Directory, web application, API, cloud, or enterprise network penetration testing.Experience with Microsoft Azure and/or AWS security testing, including identity, privilege escalation, misconfiguration, and attack-path analysis.Experience with scripting or automation using Python, PowerShell, Bash, or similar languages to automate reconnaissance, testing, data analysis, or reporting activities.Experience conducting red-team or purple-team exercises and applying MITRE ATT&CK techniques, including testing security controls such as EDR, identity protections, and network defenses.One or more recognized offensive-security certifications such as OSCP, GPEN, PNPT, CRTO, OSEP, or comparable advanced technical certifications.Strong written and verbal communication skills, including experience translating complex technical vulnerabilities into risk and remediation guidance for both technical teams and leadership.Frequency of PayMonthly Minimum Base Pay10,400Maximum Base Pay15,600Potential Annual Pay with Bonus135,200 - 202,800Year End BonusAs a year-end bonus to associates, Publix issues one month’s extra pay (pro-rated in the first year) each year if associate remains employed through issue date of the bonus check that year. This is calculated as a 13th month of pay in the Potential Annual Pay with Bonus line above.Benefits InformationEmployee stock ownership plan that contributes Publix stock to associates each year at no costAn opportunity to purchase additional shares of our privately-held stock401(k) retirement savings planGroup health, dental and vision plansPaid Time OffPaid Parental LeaveShort- and long-term disability insuranceTuition reimbursementFree hot lunches (buffet-style) at facilities with a cafeteriaVisit our website to see all of our benefits: Benefits - Jobs (publix.com)Travel Frequency0% Address321 S. Kentucky AveCityLakelandStateFlorida Zip Code33801-5004Additional InformationYour application may have additional steps that you will need to complete in order to remain eligible for consideration. Please be sure to monitor your email, including your spam folder, on a daily basis for critical, time-sensitive emails that could require action within 24-48 hours. Please do not use your Publix email address when applying. Once your application has been successfully submitted you will receive a confirmation email.***Relocation/Household Good Shipment Allowance will NOT be provided.***FacilityLak Publix Technology Hub 1 - B047 Compensation TypeMonthly Paid Monthly DepartmentPublix TechnologyJob CategoryInformation Technology/Systems : 39602BR: Lakeland, FL