Principal Cybersecurity Analyst- Penetration Tester
Api Penetration Testing
Application Security
Cybersecurity Tools
Data Security
Facilities Management
Information Security
InfoSec
Offensive Security
Owasp
Penetration Tester
Penetration Testing
Project Management
Risk Management
Security
Security Compliance
Security Operations
Security Standards
Security Testing
Software Security
Web Security
Job Description
Principal Cybersecurity Analyst role in the Security Threat Management team focused on penetration testing and vulnerability management at Publix.
Responsibilities
- Conduct internal and external penetration testing across enterprise networks, applications, APIs, cloud environments, and other technologies to identify exploitable security weaknesses and evaluate business risk.
- Plan and execute penetration-testing engagements, including technical scoping, Rules of Engagement, reconnaissance, vulnerability discovery, exploitation, validation, and reporting.
- Perform web application and API security assessments using OWASP-based methodologies and established industry security-testing best practices.
- Review system architecture, network and data flows, security controls, and application functionality to create attack scenarios and ensure testing coverage is appropriate.
- Produce technical documentation covering findings, evidence, risk, business impact, and recommended remediation actions; communicate results to technology owners and management.
- Coordinate with application, infrastructure, cloud, and engineering teams to remediate issues, retest corrective actions, and validate successful resolution.
- Support regulatory and risk-driven penetration-testing activities, including PCI, HIPAA, SOX, significant technology changes, and other enterprise security assessments.
- Research emerging attack techniques and security threats; build and improve offensive-security testing capabilities; collaborate with internal security teams and specialized third-party testing resources.
- Participate in zero-day analysis and provide direction for mitigation and remediation.
- Contribute to the vulnerability risk acceptance process by providing feedback and recommendations for specific vulnerabilities.
Technology Focus
- OWASP
Location and Work Model
- Hybrid (Lakeland, FL)
- For the hybrid work model, candidates must reside or be willing to relocate within a commutable distance of Lakeland, FL.
- Collaborate in person and innovate remotely.
Interview Process
- Selected candidates must participate in at least one onsite interview at the Lakeland, FL campus.
Benefits
- Hybrid Flexibility: Work remotely for focused time; join onsite for high-impact collaboration and brainstorming sessions.
- Operational Efficiency: Support efficient workflows and enable automation to improve operational effectiveness.
- Cutting-Edge AI Projects: Drive innovation in AI platforms, integrating advanced tools and frameworks to solve complex business challenges.
- Empowered Culture: Emphasis on autonomy, creativity, and continuous learning, with ideas influencing technology direction.
Salary: USD 10,400 - 15,600 per month