Apply for the Principal Cybersecurity Analyst- Penetration Tester (Hybrid) job opening.Principal Cybersecurity Analyst- Penetration Tester (Hybrid)

Location: Lakeland, FL
Job ID: 39602BR
Job Category: Information Technology/Systems
Pay Frequency: Monthly
Pay Range: $10,400 - $15,600
Date Posted: Nov 12, 2026

$135 - 202k

Hybrid

Full Time - Regular

Apply

---

Description

Publix Super Markets, Inc., the largest employee-owned company in the U.S., is driven by a dynamic technology team of 2,300+ professionals delivering innovative solutions to 1,400+ stores and 260,000+ associates across 8 states.

From IT security and platform engineering to architecture, software development, and infrastructure, we offer career opportunities at every level—internships through technical leadership.

Join a company consistently ranked among Fortune’s “100 Best Companies to Work For” and help us build more than great subs—build the future of technology at Publix.

The Security Threat Management team plays a critical role in protecting Publix systems, data, and operations. Often described as the “offense” side of security, this team proactively looks for weaknesses before bad actors can exploit them, helping Publix stay secure, resilient, and prepared. We’re hiring a Principal Cyber Security Analyst, heavily focused on penetration testing and vulnerability management.

Location: Hybrid (Lakeland, FL): To support our hybrid work model, candidates must reside, or be willing to relocate, within a commutable distance of Lakeland, FL.
Work Model: Enjoy the best of both worlds – collaborate in person and innovate remotely.
Interview Process: Candidates selected to advance in the interview process will be required to participate in at least one onsite interview at our Lakeland, FL campus.

Why Join Us?

• Hybrid Flexibility: Work remotely when you need focus time and join us onsite for high-impact collaboration and brainstorming sessions.
• Operational Efficiency: Ensure technology solutions support efficient workflows and enable automation to improve operational effectiveness.
• Cutting-Edge AI Projects: Drive innovation in AI platforms, integrating advanced tools and frameworks to solve complex business challenges.
• Empowered Culture: We value autonomy, creativity, and continuous learning—your ideas shape the future of technology in our organization.

Your Impact

• Perform internal and external penetration testing across enterprise networks, applications, APIs, cloud environments, and other technologies to identify exploitable security weaknesses and assess business risk.
• Plan and execute penetration-testing engagements, including technical scoping, Rules of Engagement, reconnaissance, vulnerability discovery, exploitation, validation, and reporting.
• Perform web application and API security assessments using OWASP-based methodologies and industry security-testing best practices.
• Analyze system architecture, network and data flows, security controls, and application functionality to develop comprehensive attack scenarios and ensure appropriate testing coverage.
• Document technical findings, supporting evidence, risk, business impact, and recommended remediation actions, and communicate results to technology owners and management.
• Partner with application, infrastructure, cloud, and engineering teams to remediate identified vulnerabilities, retest corrective actions, and validate successful resolution.
• Support regulatory and risk-driven penetration-testing activities, including PCI, HIPAA, SOX, significant technology changes, and other enterprise security assessments.
• Research emerging attack techniques and security threats, develop and improve offensive-security testing capabilities, and collaborate with internal security teams and specialized third-party testing resources.
• Participate in zero-day analysis and provide direction for mitigation and remediation.
• Provide feedback and recommendations in the vulnerability risk acceptance process for specific vulnerabilities.

#LI-JB1

---

Required Qualifications

• Bachelor’s degree in computer science, information technology, or a related analytical field, or equivalent experience
• 6+ years of cybersecurity or information technology experience
• 4+ years of hands-on penetration testing, offensive security, application security testing, vulnerability assessment, or an equivalent technical security role.
• Hands-on experience performing penetration testing against two or more of the following: enterprise networks, Windows/Linux systems, Active Directory, web applications, APIs, or cloud environments.
• Working knowledge of penetration-testing tools and platforms such as Burp Suite, Kali Linux, Nmap, Metasploit, BloodHound, Nessus/Tenable, Wireshark, or comparable tools.
• Experience identifying, validating, documenting, and communicating security vulnerabilities, including determining technical risk, business impact, and practical remediation recommendations.
• Working knowledge of common penetration-testing methodologies and security frameworks, including OWASP Web Security Testing Guide/OWASP Top 10, MITRE ATT&CK, CVE/CVSS, and industry-standard penetration-testing practices.

---

Preferred Qualifications

• Experience conducting advanced Active Directory, web application, API, cloud, or enterprise network penetration testing.
• Experience with Microsoft Azure and/or AWS security testing, including identity, privilege escalation, misconfiguration, and attack-path analysis.
• Experience with scripting or automation using Python, PowerShell, Bash, or similar languages to automate reconnaissance, testing, data analysis, or reporting activities.
• Experience conducting red-team or purple-team exercises and applying MITRE ATT&CK techniques, including testing security controls such as EDR, identity protections, and network defenses.
• One or more recognized offensive-security certifications such as OSCP, GPEN, PNPT, CRTO, OSEP, or comparable advanced technical certifications.
• Strong written and verbal communication skills, including experience translating complex technical vulnerabilities into risk and remediation guidance for both technical teams and leadership.

---

Benefits

• Employee stock ownership plan that contributes Publix stock to associates each year at no cost
• An opportunity to purchase additional shares of our privately-held stock
• 401(k) retirement savings plan
• Group health, dental and vision plans
• Paid Time Off
• Paid Parental Leave
• Short- and long-term disability insurance
• Tuition reimbursement
• Free hot lunches (buffet-style) at facilities with a cafeteria
• Visit our website to see all of our benefits: Benefits – Jobs (publix.com)

---

Year End Bonus

As a year-end bonus to associates, Publix issues one month’s extra pay (pro-rated in the first year) each year if associate remains employed through issue date of the bonus check that year. This is calculated as a 13th month of pay in the Potential Annual Pay with Bonus line above.

---

Additional Information

Your application may have additional steps that you will need to complete in order to remain eligible for consideration. Please be sure to monitor your email, including your spam folder, on a daily basis for critical, time-sensitive emails that could require action within 24-48 hours.

Please do not use your Publix email address when applying. Once your application has been successfully submitted you will receive a confirmation email.

***Relocation/Household Good Shipment Allowance will NOT be provided.***

---