M&A Security Integration Engineer (PMTS)

Quick Facts

• Role: M&A Security Integration Engineer (PMTS)

Description

You will join the Mergers and Acquisitions (M&A) Security team to help integrate newly acquired companies securely and efficiently. The role focuses on gap assessments and integration engineering to bring acquisitions to Salesforce security standards, while shaping integration security priorities. You will plan security workstreams, perform infrastructure assessments, execute STRIDE threat models, and collaborate closely with acquisition partners.

Responsibilities

• Create risk-based integration plans for security workstreams across the acquisition lifecycle

• Drive security work to bring acquired businesses under organizational MSA, DPA, and SPARC frameworks

• Perform comprehensive infrastructure assessments on acquired environments

• Communicate security gaps and priorities clearly and empathetically with newly acquired partners

• Prioritize critical security tasks in a fast-paced M&A environment

• Execute robust threat models using the STRIDE methodology

• Independently run security workstreams from start to finish

• Innovate M&A security workflows, integration processes, and automation

Requirements

• Degree in Cybersecurity, Computer Science, or relevant subject, or equivalent experience

• Basic coding knowledge for application security (scripting, Bash, Terraform)

• Deep understanding of the CIA Triad (Confidentiality, Integrity, Availability)

• Proven ability to prioritize complex security workflows and remediation

• Proficiency executing STRIDE threat models

• Strong understanding of direct/transitive dependencies and supply chain risks

• Ability to independently perform infrastructure assessments

• Proficiency in Cloud Security Posture Management (CSPM)

• Ability to integrate and interpret SAST and DAST tooling

• Strong knowledge of Zero Trust network architecture

• Expertise across control, data, and application plane security

• Proficiency in secrets management best practices

• Deep knowledge of build pipeline and path-to-production security (source, build, artifact repository, production deployment)

• Experience with code and binary signing

• Experience with bug categorization and severity mapping

• Proficiency in data classification standards

• Clear understanding of MSA, DPA, and SPARC frameworks for enterprise security

• Familiarity with SOC2 compliance requirements and controls

• Excellent communication skills

Benefits

• Time off programs

• Medical, dental, vision, and mental health support

• Paid parental leave

• Life and disability insurance

• 401(k)

• Employee stock purchasing program

AI agents accelerate impact as part of the broader platform.