Cybersecurity Staff Engineer – Data Protection

Heritage Landscape Supply - McKinney; McKinney (TX); On-site; USD 101,000 - 133,000; Full time

Job summary

SRS Distribution Inc. in McKinney, TX seeks a Cybersecurity Staff Engineer – Data Protection to lead design and implementation of enterprise data protection, including encryption, DLP, and secure data lifecycle management.

The role focuses on PKI, TLS 1.3, and Zscaler DLP, partnering with legal and compliance to ensure policy alignment, governance, and audit readiness; includes mentorship and cross-team collaboration.

Qualifications

• 8+ years in cybersecurity with 5+ years in data protection or information security engineering.
• Hands-on PKI, certificate management, TLS/SSL, and encryption technologies.
• Experience with DLP tools (e.g., Zscaler, Forcepoint, Trellix, Symantec).
• Knowledge of document retention and secure destruction processes; policy integration with legal/compliance.
• Familiarity with IoT remediation and risk reduction strategies.
• Strong understanding of data protection regulations (HIPAA, PCI, SOX) and enterprise compliance frameworks.
• Demonstrated ability to lead enterprise security initiatives and engage with cross-functional stakeholders.

Responsibilities

• Lead the design and implementation of enterprise data protection capabilities, including encryption, DLP, and secure data lifecycle management.
• Drive PKI & Certificate Management, including certificate rollout, and lifecycle automation.
• Develop and execute the TLS 1.3 roadmap, including assessment, compatibility analysis, dependency mapping, and migration strategy.
• Partner with legal, accounting, and compliance teams to implement document retention and secure shredding policies.
• Serve as a trusted SME for data protection across technical teams, business units, and senior leadership.
• Collaborate with enterprise architects and security engineers to integrate Zscaler DLP and other data protection tools into corporate workflows.
• Oversee multiple data protection projects concurrently, ensuring alignment with compliance, audit readiness, and business objectives.
• Provide technical mentorship to engineers and create detailed documentation to support ongoing operations and regulatory requirements.
• Engage stakeholders and guide decision-making through proactive communication and alignment with strategic objectives.
• Contribute to the long-term Data Protection program strategy.

Skills

PKI

Certificate management

TLS 1.3

Encryption

DLP

Security architecture

Compliance

Stakeholder communication

Education

Bachelor's degree in Cybersecurity or related field

Master's degree in Cybersecurity or related field

CISSP

CISM

CISA

CCSP

GSE

Tools

Microsoft Purview

Zscaler DLP

Job description

Cybersecurity Staff Engineer – Data Protection

McKinney, TX 75070

$100,500 - $133,100/yearly Posted 2 days ago Less than 10 applies 3 min average apply

Job Location: National Structure - McKinney 101 Throckmorton St McKinney, TX 75069

Position Purpose

SRS is seeking a Cybersecurity Staff Engineer – Data Protection to lead the design, implementation, and continuous improvement of data protection solutions. This role will focus on encryption standards, certificate lifecycle management, DLP, secure document handling, and program governance. Ideal candidates will bring deep technical expertise across PKI, TLS 1.3, Zscaler DLP, and enterprise data protection frameworks, along with a strong understanding of security architecture, compliance, and operational best practices.

Key Responsibilities

• Lead the design and implementation of enterprise data protection capabilities, including encryption, DLP, and secure data lifecycle management.
• Drive PKI & Certificate Management, including certificate rollout, and lifecycle automation.
• Develop and execute the TLS 1.3 roadmap, including assessment, compatibility analysis, dependency mapping, and migration strategy.
• Partner with legal, accounting, and compliance teams to implement document retention and secure shredding policies.
• Serve as a trusted SME for data protection across technical teams, business units, and senior leadership.
• Collaborate with enterprise architects and security engineers to integrate Zscaler DLP and other data protection tools into corporate workflows.
• Oversee multiple data protection projects concurrently, ensuring alignment with compliance, audit readiness, and business objectives.
• Provide technical mentorship to engineers and create detailed documentation to support ongoing operations and regulatory requirements.
• Engage stakeholders and guide decision-making through proactive communication and alignment with strategic objectives.
• Contribute to the long-term Data Protection program strategy.

Required Qualifications

• 8+ years of experience in Cybersecurity, with at least 5 years focused on Data Protection or Information Security Engineering.
• Hands‑on expertise in PKI, certificate management, TLS/SSL, and encryption technologies.
• Experience with DLP tools (e.g., Zscaler, Forcepoint, Trellix, Symantec, or equivalent).
• Knowledge of document retention and secure destruction processes, including policy integration with legal and compliance requirements.
• Familiarity with IoT remediation and risk reduction strategies.
• Strong understanding of data protection regulations (HIPAA, PCI, SOX) and enterprise compliance frameworks.
• Demonstrated ability to lead enterprise security initiatives and engage with cross‑functional stakeholders.
• Excellent communication, analytical, and organizational skills.
• Comfortable working independently or within a team in a hybrid work environment.

Preferred Experience

• Microsoft Purview and Zscaler DLP

Minimum Education

Bachelor's degree in Cybersecurity, Computer Science, Engineering, or a closely related field.

Preferred Education

Master's degree in Cybersecurity, Computer Science, Engineering, or a related field is highly desirable, reflecting a commitment to advanced knowledge and expertise in securing enterprise environments.

Minimum Years of Work Experience

The minimum years of work experience required for the Cybersecurity Staff Engineer role at the company is 8+ years.

Certifications

• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• Certified Information Systems Auditor (CISA)
• Certified Cloud Security Professional (CCSP)
• GIAC Security Expert (GSE)

Competencies

• Strategic Problem Solving – Drive the design, review, and execution of solutions to protect enterprise-level systems. Provide strategic insight to developing and optimizing cybersecurity solutions that address both current and emerging threats.
• Leadership and Mentoring – Lead teams by example, providing guidance and mentorship to foster professional growth among team members. Develop others by sharing knowledge, facilitating skill development, and empowering colleagues to achieve cybersecurity objectives.
• Technical Proficiency – Utilize cybersecurity technical expertise to write code or scripts for automation, monitoring, and testing purposes. Employ advanced technical skills in configuring and integrating systems cybersecurity systems in collaboration with enterprise technology teams.
• Collaboration and Partnership – Collaborate with internal teams, such as Networking and Engineering, to facilitate vulnerability management programs and integrate security solutions. Foster partnerships across the organization to enhance overall cybersecurity posture.
• Effective Communication – Clearly convey complex cybersecurity concepts and strategies to diverse stakeholders, ensuring alignment on security initiatives and facilitating informed decision-making.
• Operational Excellence – Deliver consistent execution of security monitoring, assessment, and response solutions. Align projects with strategic plans to optimize security service operations and enhance risk mitigation measures.
• Conflict Management and Resolution – Manage and resolve conflicts effectively within teams or projects to maintain focus on cybersecurity goals and ensure the smooth execution of initiatives.
• Risk Assessment and Advisory – Conduct thorough risk assessments and provide advisory services that proactively address security vulnerabilities and compliance issues, aligning with governance frameworks and strategic security planning.

Equal Employment Opportunity Statement

As an Equal Employment Opportunity (EEO) employer SRS Distribution Inc., including all its subsidiaries, provides job opportunities to qualified individuals without regard to actual or perceived race, color, creed, religion, national origin, sex, gender, age, disability, gender identity, sexual orientation, citizenship status, uniform service, veteran status, marital status, genetic information, physical or mental disability, or any other characteristic in accordance with applicable federal, state, and local EEO laws.

Disability Accommodation

If you are an individual with a disability or a disabled veteran and require a reasonable accommodation in applying for any posted position, please contact Human Resources at US: 855.556.3221, or by email to: [e-mail] with the nature of your accommodation request and include the Business name, location and title of the job opening. Please allow one (1) business day for a reply.

Background Check and Drug Screen

All employment offers are contingent upon successful completion of a background check and drug screen, as permitted by law.

Benefits

• Competitive weekly/bi-weekly pay, discretionary bonuses, 401(k) with company match
• Employee Stock Purchase Plan
• Paid time off (vacation, sick, volunteer, holidays, birthday, floating)
• Medical/dental/vision
• Flexible spending accounts
• Company‑paid life and short‑term disability, plus optional long‑term disability
• Additional life insurance
• All benefits subject to eligibility.

Agency Payment Policy

Should a Candidate be submitted to fill a position by a recruiting or staffing services agency (“Agency”), the Company has no obligation to pay the Agency any fee for submission, offer, placement or any service without a fully executed contract of service covering the engagement.