Cybersecurity Staff Engineer – Data Protection

Heritage Landscape Supply - McKinney is hiring a Cybersecurity Staff Engineer – Data Protection for a hybrid role in McKinney, TX. This position helps secure enterprise data through encryption standards, DLP, certificate lifecycle automation, and governance that supports audit readiness.

Along with the technical impact, you’ll have access to a benefits package designed for long-term stability, including competitive weekly/bi-weekly pay (USD 100,500 - 133,100 yearly), discretionary bonuses, and 401(k) with company match. Additional support includes an Employee Stock Purchase Plan, paid time off (vacation, sick, volunteer, holidays, birthday, floating), medical/dental/vision, and flexible spending accounts. Coverage options include company-paid life and short-term disability, optional long-term disability, and additional life insurance.

Responsibilities

• Lead the design and implementation of enterprise data protection capabilities, including encryption, DLP, and secure data lifecycle management.
• Drive PKI & certificate management, including certificate rollout and lifecycle automation.
• Develop and execute the TLS 1.3 roadmap through assessment, compatibility analysis, dependency mapping, and migration strategy.
• Partner with legal, accounting, and compliance teams to implement document retention and secure shredding policies.
• Act as a trusted SME for data protection across technical teams, business units, and senior leadership.
• Collaborate with enterprise architects and security engineers to integrate Zscaler DLP and other data protection tools into corporate workflows.
• Oversee multiple data protection projects concurrently while aligning with compliance, audit readiness, and business objectives.
• Provide technical mentorship, create detailed documentation, and support ongoing operations and regulatory requirements.
• Engage stakeholders and guide decision-making with proactive communication aligned to strategic objectives.
• Contribute to the long-term Data Protection program strategy.

Requirements

• 8+ years of experience in cybersecurity, with at least 5 years focused on data protection or information security engineering.
• Hands-on expertise in PKI, certificate management, TLS/SSL, and encryption technologies.
• Experience with DLP tools, such as Zscaler, Forcepoint, Trellix, Symantec, or equivalent.
• Knowledge of document retention and secure destruction, including policy integration with legal and compliance requirements.
• Familiarity with IoT remediation and risk reduction strategies.
• Strong understanding of data protection regulations and enterprise compliance frameworks, including HIPAA, PCI, and SOX.
• Demonstrated ability to lead enterprise security initiatives and work with cross-functional stakeholders.
• Excellent communication, analytical, and organizational skills.
• Comfortable working independently or within a team in a hybrid work environment.

Preferred

• Preferred Experience: Microsoft Purview and Zscaler DLP
• Preferred Education: Master’s degree in cybersecurity, computer science, engineering, or a related field

Education

Bachelor’s degree in Cybersecurity, Computer Science, Engineering, or a closely related field.

Certifications

• CISSP
• CISM
• CISA
• CCSP
• GIAC Security Expert (GSE)

Key Technologies

TLS 1.3, TLS/SSL, PKI, Zscaler DLP, Forcepoint, Trellix, Symantec, Microsoft Purview, HIPAA, PCI, SOX.

Competencies

• Strategic Problem Solving
• Leadership and Mentoring
• Technical Proficiency
• Collaboration and Partnership
• Effective Communication
• Operational Excellence
• Conflict Management and Resolution
• Risk Assessment and Advisory