Cybersecurity Staff Engineer – Data Protection

Cybersecurity Jobs; McKinney (TX); Hybrid; USD 101,000 - 133,000; Full time

Benefits offered by this job

Competitive weekly/bi-weekly pay

Discretionary bonuses

401(k) with company match

Employee Stock Purchase Plan

Paid time off (vacation, sick, etc.)

Medical/dental/vision

Flexible spending accounts

Company-paid life insurance

Short-term disability

Optional long-term disability

Additional life insurance

Job summary

Heritage Landscape Supply in McKinney, TX is seeking a Cybersecurity Staff Engineer – Data Protection to strengthen enterprise data security through encryption, DLP, certificate lifecycle automation, and governance that supports audit readiness.

This hybrid role offers a comprehensive benefits package including competitive weekly/bi-weekly pay, discretionary bonuses, 401(k) with match, Employee Stock Purchase Plan, paid time off, medical/dental/vision, and flexible spending accounts.

Qualifications

• 8+ years in cybersecurity, with at least 5 years focused on data protection or information security engineering.
• Hands-on expertise in PKI, certificate management, TLS/SSL, and encryption technologies.
• Experience with DLP tools such as Zscaler, Forcepoint, Trellix, Symantec, or equivalent.
• Knowledge of document retention and secure destruction with policy integration to legal/compliance.
• Familiarity with IoT remediation and risk reduction strategies.
• Strong understanding of data protection regulations and enterprise compliance frameworks (HIPAA, PCI, SOX).
• Demonstrated ability to lead enterprise security initiatives and work with cross-functional stakeholders.
• Excellent communication, analytical, and organizational skills.
• Comfortable working in a hybrid work environment.

Responsibilities

• Lead the design and implementation of enterprise data protection capabilities (encryption, DLP, secure data lifecycle management).
• Drive PKI and certificate management, including rollout and lifecycle automation.
• Develop and execute TLS 1.3 roadmap through assessment and migration strategy.
• Partner with legal, accounting, and compliance teams on retention and secure shredding policies.
• Act as SME for data protection across teams and leadership.
• Collaborate with enterprise architects to integrate data protection tools into workflows.
• Oversee multiple data protection projects, aligning with compliance and business objectives.
• Provide technical mentorship and create detailed documentation for operations and regulatory requirements.
• Engage stakeholders with proactive communication aligned to strategic objectives.
• Contribute to long-term Data Protection program strategy.

Skills

PKI

Certificate Management

TLS/SSL

Encryption

DLP

Zscaler DLP

Policy & Compliance

Cross-functional Collaboration

Education

Bachelor's degree in Cybersecurity/Computer Science

Master’s degree preferred

Tools

Zscaler

Forcepoint

Trellix

Symantec

Microsoft Purview

Job description

Heritage Landscape Supply - McKinney is hiring a Cybersecurity Staff Engineer – Data Protection for a hybrid role in McKinney, TX. This position helps secure enterprise data through encryption standards, DLP, certificate lifecycle automation, and governance that supports audit readiness.

Along with the technical impact, you’ll have access to a benefits package designed for long-term stability, including competitive weekly/bi-weekly pay (USD 100,500 - 133,100 yearly), discretionary bonuses, and 401(k) with company match. Additional support includes an Employee Stock Purchase Plan, paid time off (vacation, sick, volunteer, holidays, birthday, floating), medical/dental/vision, and flexible spending accounts. Coverage options include company-paid life and short-term disability, optional long-term disability, and additional life insurance.

Responsibilities

• Lead the design and implementation of enterprise data protection capabilities, including encryption, DLP, and secure data lifecycle management.


• Drive PKI & certificate management, including certificate rollout and lifecycle automation.


• Develop and execute the TLS 1.3 roadmap through assessment, compatibility analysis, dependency mapping, and migration strategy.


• Partner with legal, accounting, and compliance teams to implement document retention and secure shredding policies.


• Act as a trusted SME for data protection across technical teams, business units, and senior leadership.


• Collaborate with enterprise architects and security engineers to integrate Zscaler DLP and other data protection tools into corporate workflows.


• Oversee multiple data protection projects concurrently while aligning with compliance, audit readiness, and business objectives.


• Provide technical mentorship, create detailed documentation, and support ongoing operations and regulatory requirements.


• Engage stakeholders and guide decision-making with proactive communication aligned to strategic objectives.


• Contribute to the long-term Data Protection program strategy.

Requirements

• 8+ years of experience in cybersecurity, with at least 5 years focused on data protection or information security engineering.


• Hands-on expertise in PKI, certificate management, TLS/SSL, and encryption technologies.


• Experience with DLP tools, such as Zscaler, Forcepoint, Trellix, Symantec, or equivalent.


• Knowledge of document retention and secure destruction, including policy integration with legal and compliance requirements.


• Familiarity with IoT remediation and risk reduction strategies.


• Strong understanding of data protection regulations and enterprise compliance frameworks, including HIPAA, PCI, and SOX.


• Demonstrated ability to lead enterprise security initiatives and work with cross-functional stakeholders.


• Excellent communication, analytical, and organizational skills.


• Comfortable working independently or within a team in a hybrid work environment.

Preferred

• Preferred Experience: Microsoft Purview and Zscaler DLP


• Preferred Education: Master’s degree in cybersecurity, computer science, engineering, or a related field

Education

Bachelor’s degree in Cybersecurity, Computer Science, Engineering, or a closely related field.

Certifications

• CISSP


• CISM


• CISA


• CCSP


• GIAC Security Expert (GSE)

Key Technologies

TLS 1.3, TLS/SSL, PKI, Zscaler DLP, Forcepoint, Trellix, Symantec, Microsoft Purview, HIPAA, PCI, SOX.

Competencies

• Strategic Problem Solving


• Leadership and Mentoring


• Technical Proficiency


• Collaboration and Partnership


• Effective Communication


• Operational Excellence


• Conflict Management and Resolution


• Risk Assessment and Advisory