# Mergers and Acquisitions Security Engineer

**Company**: Salesforce
**Location**: San Francisco, California
**Experience**: senior
**Job type**: full-time
**Salary**: $197,300 - $313,700 annually
**Category**: Security
**Industry**: Technology

**Apply**: https://salesforce.wd12.myworkdayjobs.com/en-US/External_Career_Site/job/California---San-Francisco/M-A-Security-Integration-Engineer---PMTS_JR366855?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/job/mergers-and-acquisitions-security-engineer-a47df595-f82/

## Description

Join our Mergers and Acquisitions (M&A) Security team in a fast-paced, strategic organization scaling through acquisition. This role is critical to successfully integrating new business acquisitions securely and efficiently.

You will act as the primary security partner for newly acquired companies, guiding them through our integration pipeline. Your core focus will be performing meticulous gap assessments and integration engineering to bring acquisitions to Salesforce's standards for security and inform integration priorities.

**Core Responsibilities & Scope**

- Create comprehensive integration plans for security workstreams with risk-based integration priorities during the acquisition integration lifecycle.

- Drive and close the security work required to bring acquired businesses under our organizational MSA, DPA, and SPARC frameworks.

- Perform comprehensive infrastructure assessments on acquired environments.

- Communicate clearly, empathetically, and effectively with newly acquired business partners to bridge security gaps collaboratively.

- Prioritize critical security work in a highly dynamic, fast-paced M&A environment.

- Execute robust threat models using the STRIDE methodology.

- Independently drive your own work streams from start to finish without requiring heavy oversight.

- Continuously innovate on our M&A security workflows, integration processes, and automation capabilities.

**Minimum Requirements**

- Degree in Cybersecurity, Computer Science or a relevant subject area, or equivalent experience.

- Basic coding knowledge for application security (e.g., scripting, Bash, Terraform).

- Deep understanding of the CIA Triad (Confidentiality, Integrity, and Availability).

- Demonstrated ability to prioritize complex security workflows and remediation efforts.

- Proficiency in executing threat models using STRIDE.

- Strong understanding of direct and transitive dependencies, as well as broader supply chain risks.

- Ability to independently perform infrastructure assessments.

- Well-versed in Cloud Security Posture Management (CSPM).

- Excellent communication skills, ability to tailor messaging for newly joining partners, requiring patience and leadership.

- Versed in integrating and interpreting SAST (Static Application Security Testing) and DAST (Dynamic Application Security Testing) tooling.

- Strong understanding of Zero Trust network architecture.

- Expertise across Control, Data, and Application plane security.

- Proficiency in secrets management best practices.

- Deep knowledge of the path to production and build pipeline security (spanning source, build, artifact repository, and production deployment).

- Experience with code and binary signing practices.

- Experience with bug categorization and severity mapping.

- Proficiency in data classification standards.

- Clear understanding of what MSA, DPA, and SPARC frameworks entail for enterprise security.

- Familiarity with SOC2 compliance requirements and controls.

**Preferred Qualifications**

- Preferred Information security certifications (e.g., OSCP, OSEP, GPEN, GXPN, CISSP) or cloud security certifications.

- Preferred Contributions to the infosec community (participation in bug bounty programs, public research, blogging, presentations, etc.).

- Experience in M&A, due diligence, or integration security, or in third-party security assessment under tight deal timelines.

**Benefits**

- Time off programs

- Medical, dental, vision

- Mental health support

- Paid parental leave

- Life and disability insurance

- 401(k)

- Employee stock purchasing program

For more fresh new jobs, check out [yubhub.co](https://yubhub.co/).

## Skills

### Required
- Cybersecurity
- Computer Science
- Scripting
- Bash
- Terraform
- STRIDE methodology
- Cloud Security Posture Management (CSPM)
- Zero Trust network architecture
- Secrets management
- Data classification standards
- SOC2 compliance

### Nice to have
- Information security certifications
- Bug bounty programs
- Public research
- Blogging
- Presentations
- M&A experience

---

Source: [Apply at salesforce.wd12.myworkdayjobs.com](https://salesforce.wd12.myworkdayjobs.com/en-US/External_Career_Site/job/California---San-Francisco/M-A-Security-Integration-Engineer---PMTS_JR366855?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)