Cybersecurity Analyst – Security Threat Monitoring

Publix•Lakeland, FL

12d•Hybrid

About The Position

Publix Super Markets, Inc., the largest employee-owned company in the U.S., is driven by a dynamic technology team of 2,300+ professionals delivering innovative solutions to 1,400+ stores and 260,000+ associates across 8 states. From IT security and platform engineering to architecture, software development, and infrastructure, we offer career opportunities at every level—internships through technical leadership. Join a company consistently ranked among Fortune’s “100 Best Companies to Work For” and help us build more than great subs—build the future of technology at Publix. The Security Threat Monitoring (ST-Mon) team is responsible for protecting Publix by continuously monitoring, detecting, investigating, remediating, and escalating cybersecurity threats across the enterprise. The team also provides additional services and support products, including Spam Reporting, Log Integrity, Brandwatch, Confidential Investigations, and process automation. This position plays a key role in safeguarding Publix by leveraging security technologies, operational expertise, analytics, and automation to enhance security services, improve operational effectiveness, and reduce organizational risk.

Requirements

Bachelor’s degree in computer science, Cybersecurity, Information Systems, Analytics, or a related discipline; or equivalent combination of education and experience.
Knowledge of cybersecurity principles, threat detection, incident response, and security monitoring concepts.
Strong analytical and problem-solving skills with the ability to evaluate complex situations, identify solutions, and exercise sound judgment.
Strong written and verbal communication skills with the ability to document findings, procedures, and recommendations.
Ability to manage multiple priorities and work effectively in a fast-paced operational environment.
Self-motivated with a strong desire to learn, grow, and contribute to a rapidly evolving technology and security environment.
Demonstrated ability to seek and apply feedback, adapt to changing priorities, and continuously improve individual and team performance.
Ability to work collaboratively with teammates and business partners while maintaining a customer-focused and team-oriented mindset.
Ability to participate in an on-call rotation supporting priority-one incidents and operational support activities.

Nice To Haves

Experience working in a Security Operations Center (SOC), Cybersecurity Operations, Incident Response, Threat Detection, or related security function.
Experience developing scripts, applications, automations, or integrations using Python, PowerShell, JavaScript, Power Automate, APIs, low-code platforms, or similar technologies.
Experience using programming, scripting, or automation technologies to solve operational challenges, eliminate manual effort, and improve service efficiency.
Experience with security monitoring and investigation tools such as Microsoft Defender XDR, Microsoft Sentinel, Azure Data Explorer, Kusto Query Language (KQL), or similar technologies.
Experience leveraging artificial intelligence (AI), machine learning, or generative AI technologies to improve operational efficiency, enhance user experiences, and support business objectives.
Experience with data analysis, reporting, metrics collection, dashboards, or operational performance measurement.
Experience developing, maintaining, or following technical documentation, workflows, playbooks, or operational procedures.

Responsibilities

Monitor, investigate, and respond to cybersecurity alerts to identify threats, determine risk, and drive appropriate remediation or escalation actions.
Recommend enhancements to security detections, signatures, and monitoring capabilities to improve alert quality, fidelity, and operational effectiveness.
Contribute to 24/7 security monitoring by participating in the on-call rotation supporting priority-one alert coverage.
Document and track service activities, investigations, and operational accomplishments to support performance metrics, leadership reporting, capacity planning, and continuous improvement efforts.
Support auxiliary services and products, including Confidential Investigations, Log Integrity monitoring, Brandwatch monitoring, and other security operations capabilities.
Design and implement automation solutions that improve efficiency, reduce manual effort, and enhance service delivery across Security Threat Monitoring services and products.
Develop, maintain, and improve documentation, playbooks, workflows, and operational procedures to enhance service quality, consistency, and knowledge sharing.
Leverage artificial intelligence (AI), machine learning, and automation technologies to improve analyst effectiveness, enhance user experience, and drive continuous improvement across Security Threat Monitoring services and products.