Senior Cloud Security Engineer 2

Publix Super Markets•Lakeland, FL

4d•Hybrid

About The Position

Publix Super Markets, Inc., the largest employee-owned company in the U.S., is driven by a dynamic technology team of 2,300+ professionals delivering innovative solutions to 1,400+ stores and 260,000+ associates across 8 states. From IT security and platform engineering to architecture, software development, and infrastructure, we offer career opportunities at every level—internships through technical leadership. Join a company consistently ranked among Fortune’s “100 Best Companies to Work For” and help us build more than great subs—build the future of technology at Publix. As a Cloud Security Engineer, you will be a subject matter expert, designing, deploying, integrating, and tuning Cloud security technologies. You will lead projects to integrate security solutions while coordinating efforts across teams. This position will also provide security for the best practices and guidance for Publix Super Markets, Inc. Location: Hybrid (Lakeland, FL) Work Model: Enjoy the best of both worlds—collaborate in person and innovate remotely. Why Join Us? Hybrid Flexibility: Work remotely when you need focus time and join us onsite for high-impact collaboration and brainstorming sessions. Operational Efficiency: Ensure technology solutions support efficient workflows and enable automation to improve operational effectiveness. Cutting-Edge AI Projects: Drive innovation in AI platforms, integrating advanced tools and frameworks to solve complex business challenges. Empowered Culture: We value autonomy, creativity, and continuous learning—your ideas shape the future of technology in our organization. Your Impact Oversee the deployment and ongoing management of AI and cloud security tools focused on secure configuration, vulnerability management, threat protection, and logging and monitoring, Develop requirements and repeatable validation frameworks to enable AI security coverage across teams, Identify and assist with remediating vulnerabilities in AI based systems such as data leakage, insecure tool use, authentication gaps, and abuse paths, Evaluate AI systems for prompt injections (direct, indirect, conditional, and persistent), including risks introduced through retrieval-augmented generation and agentic workflows, Create security automation for response and remediation of compliance findings and hardening of cloud infrastructure and AI solutions, Mentor and educate security and delivery teams in effective use and best practices for AI and cloud security tools, Serve as an Information Security Subject Matter Expert (SME) by maintaining knowledge of industry-recognized security technologies and concepts, Play a key role in ensuring our cloud capabilities meet PCI/SOX/HIPAA/PII compliance standards, Work closely with various teams to provide security consultation, guidance on new cloud products, while refining and enhancing the risk strategy for cloud architecture, Engage and foster relationships with security champions on business and cloud teams to understand their needs and evangelize a “shift-left” DevSecOps culture, and Participate in on-call rotation approximately every ten weeks. #LI-JB1

Requirements

Bachelor’s degree in computer science or other technical discipline or equivalent experience
4+ years of security experience working with application security, cloud security, and testing or securing AI-enabled systems, LLM integrations, or agent-based workflows
2+ years of experience with securing Cloud resources using enterprise tools such as Microsoft Defender for Cloud, Prisma Cloud, and/or Google Security Command Center
Experience using AI platforms or AI services and turning AI security findings into actionable guidance
Understanding security requirements, best practices, and execution in various cloud implementation scenarios: IaaS, PaaS, SaaS
Experience with scripting, automation, deployment orchestration, or security configuration management with at least one of the following Terraform, Chef, Puppet, YAML, JSON, PowerShell, BASH, Go, or Python
Knowledge of CI/CD pipelines, containers, container registries, and code repositories, and use of tools such as Jenkins, GitHub, Azure DevOps, etc.
Knowledge of compliance and regulatory security requirements (SOX, PCI, HIPAA)
Understanding of Agile methodologies
Strong collaboration and communication skills, with the ability to work directly with engineers and application teams

Nice To Haves

Continued education including additional or advanced degrees in analytical, technical, or business discipline
6+ years of experience in security engineering working with application security, cloud security, and securing AI-enabled systems, LLM integrations, or agent-based workflows
1+ years of experience using AI platforms or enterprise AI services and turning AI security findings into scalable guidance
1+ years of experience with automation, deployment orchestration, and security configuration management with Terraform, Chef, Puppet, YAML, JSON, PowerShell, BASH, Go, or Python
1+ years of experience with hardening CI/CD pipelines, containers, container registries, and code repositories, and use of tools such as Jenkins, GitHub, Azure DevOps, etc.
1+ years of experience in project management and leading projects to completion
Familiarity with Cloud CIS benchmarks
One or more of the following certifications: Security +, Cloud +, Microsoft Certified Azure Security Engineer Associate (MCASEA), Certified Cloud Security Professional (CCSP), and/or Certified Information Systems Security Professional (CISSP), ISSAP/ISSEP/ISSMP concentration preferred

Responsibilities

Oversee the deployment and ongoing management of AI and cloud security tools focused on secure configuration, vulnerability management, threat protection, and logging and monitoring
Develop requirements and repeatable validation frameworks to enable AI security coverage across teams
Identify and assist with remediating vulnerabilities in AI based systems such as data leakage, insecure tool use, authentication gaps, and abuse paths
Evaluate AI systems for prompt injections (direct, indirect, conditional, and persistent), including risks introduced through retrieval-augmented generation and agentic workflows
Create security automation for response and remediation of compliance findings and hardening of cloud infrastructure and AI solutions
Mentor and educate security and delivery teams in effective use and best practices for AI and cloud security tools
Serve as an Information Security Subject Matter Expert (SME) by maintaining knowledge of industry-recognized security technologies and concepts
Play a key role in ensuring our cloud capabilities meet PCI/SOX/HIPAA/PII compliance standards
Work closely with various teams to provide security consultation, guidance on new cloud products, while refining and enhancing the risk strategy for cloud architecture
Engage and foster relationships with security champions on business and cloud teams to understand their needs and evangelize a “shift-left” DevSecOps culture
Participate in on-call rotation approximately every ten weeks