Cybersecurity Staff Engineer – Data Protection

Build and advance enterprise data protection capabilities in a hybrid environment based in McKinney, TX. This role supports a mature, compliance-focused program where you can drive encryption standards, certificate lifecycle automation, and data loss prevention practices while partnering with cross-functional teams. Compensation includes USD 100,500 to 133,100 per year plus discretionary bonuses.

What you’ll do

• Lead the design and implementation of enterprise data protection capabilities, including encryption, DLP, and secure data lifecycle management.
• Drive PKI and certificate management, including certificate rollout and lifecycle automation.
• Develop and execute the TLS 1.3 roadmap through assessment, compatibility analysis, dependency mapping, and migration planning.
• Partner with legal, accounting, and compliance teams to implement document retention and secure shredding policies.
• Act as a trusted SME for data protection across technical teams, business units, and senior leadership.
• Collaborate with enterprise architects and security engineers to integrate Zscaler DLP and other data protection tools into corporate workflows.
• Oversee multiple data protection projects at once, maintaining alignment with compliance, audit readiness, and business objectives.
• Provide technical mentorship, create detailed documentation, and support ongoing operations and regulatory requirements.
• Engage stakeholders and guide decision-making through proactive communication aligned with program goals.
• Contribute to the long-term Data Protection program strategy.

Core experience and qualifications

• 8+ years of experience in cybersecurity, with at least 5 years focused on data protection or information security engineering.
• Hands-on expertise in PKI, certificate management, TLS/SSL, and encryption technologies.
• Experience with DLP tools such as Zscaler, Forcepoint, Trellix, Symantec, or equivalent.
• Knowledge of document retention and secure destruction processes, including integration of policies with legal and compliance requirements.
• Familiarity with IoT remediation and risk reduction strategies.
• Strong understanding of data protection regulations and enterprise compliance frameworks, including HIPAA, PCI, and SOX.
• Proven ability to lead enterprise security initiatives and collaborate with cross-functional stakeholders.
• Excellent communication, analytical, and organizational skills.
• Comfort working independently or within a team in a hybrid work environment.

Helpful technical focus

• Preferred experience: Microsoft Purview and Zscaler DLP.
• Technologies include: TLS 1.3, TLS/SSL, PKI, Zscaler DLP, Forcepoint, Trellix, Symantec, Microsoft Purview, HIPAA, PCI, and SOX.

Education and certifications

A Bachelor’s degree in cybersecurity, computer science, engineering, or a closely related field is required.

Master’s degree is highly desirable.

• CISSP
• CISM
• CISA
• CCSP
• GIAC Security Expert (GSE)

Compensation and benefits

• Competitive weekly/bi-weekly pay
• Discretionary bonuses
• 401(k) with company match
• Employee Stock Purchase Plan
• Paid time off (vacation, sick, volunteer, holidays, birthday, floating)
• Medical/dental/vision
• Flexible spending accounts
• Company-paid life and short-term disability
• Optional long-term disability
• Additional life insurance

Key competencies

• Strategic Problem Solving
• Leadership and Mentoring
• Technical Proficiency
• Collaboration and Partnership
• Effective Communication
• Operational Excellence
• Conflict Management and Resolution
• Risk Assessment and Advisory