Cybersecurity Staff Engineer – Data Protection

Heritage Landscape Supply - Mc Kinney is hiring a Cybersecurity Staff Engineer – Data Protection for a hybrid role in McKinney, TX
. This position helps secure enterprise data through encryption standards, DLP, certificate lifecycle automation, and governance that supports audit readiness.

Along with the technical impact, you’ll have access to a benefits package designed for long-term stability, including competitive weekly/bi-weekly pay (USD 100, yearly),
discretionary bonuses
, and 401(k) with company match
. Additional support includes an Employee Stock Purchase Plan
, paid time off (vacation, sick, volunteer, holidays, birthday, floating),
medical/dental/vision
, and flexible spending accounts
. Coverage options include company-paid life and short-term disability
, optional long-term disability
, and additional life insurance
.

• Lead the design and implementation of enterprise data protection capabilities, including encryption
  , DLP
  , and secure data lifecycle management.
• Drive PKI & certificate management
  , including certificate rollout and lifecycle automation.
• Develop and execute the TLS 1.3 roadmap through assessment, compatibility analysis, dependency mapping, and migration strategy.
• Partner with legal, accounting, and compliance teams to implement document retention and secure shredding policies.
• Act as a trusted SME for data protection across technical teams, business units, and senior leadership.
• Collaborate with enterprise architects and security engineers to integrate Zscaler DLP and other data protection tools into corporate workflows.
• Oversee multiple data protection projects concurrently while aligning with compliance, audit readiness, and business objectives.
• Provide technical mentorship, create detailed documentation, and support ongoing operations and regulatory requirements.
• Engage stakeholders and guide decision-making with proactive communication aligned to strategic objectives.
• Contribute to the long-term Data Protection program strategy
  .

• 8+ years of experience in cybersecurity, with at least 5 years focused on data protection or information security engineering.
• Hands-on expertise in PKI
  , certificate management
  , TLS/SSL
  , and encryption technologies.
• Experience with DLP tools
  , such as Zscaler
  , Forcepoint
  , Trellix
  , Symantec
  , or equivalent.
• Knowledge of document retention and secure destruction
  , including policy integration with legal and compliance requirements.
• Familiarity with IoT remediation and risk reduction strategies.
• Strong understanding of data protection regulations and enterprise compliance frameworks, including HIPAA
  , PCI
  , and SOX
  .
• Demonstrated ability to lead enterprise security initiatives and work with cross-functional stakeholders.
• Excellent communication, analytical, and organizational skills.
• Comfortable working independently or within a team in a hybrid work environment.

• Preferred Experience:
  Microsoft Purview and Zscaler DLP
• Preferred Education: Master’s degree in cybersecurity, computer science, engineering, or a related field

Bachelor’s degree in Cybersecurity
, Computer Science
, Engineering
, or a closely related field.

• CISSP
• CISM
• CISA
• CCSP
• GIAC Security Expert (GSE)

TLS 1.3,
TLS/SSL
, PKI
, Zscaler DLP
, Forcepoint
, Trellix
, Symantec
, Microsoft Purview
, HIPAA
, PCI
, SOX
.

• Strategic Problem Solving
• Leadership and Mentoring
• Technical Proficiency
• Collaboration and Partnership
• Effective Communication
• Operational Excellence
• Conflict Management and Resolution
• Risk Assessment and Advisory