M&A Security Integration Engineer - PMTS

About Salesforce

What You'll Be Doing & Why It Matters

Join our Mergers and Acquisitions (M&A) Security team in a fast-paced, strategic organization scaling through acquisition. This role is critical to successfully integrating new business acquisitions securely and efficiently.

You will act as the primary security partner for newly acquired companies, guiding them through our integration pipeline. Your core focus will be performing meticulous gap assessments and integration engineering to bring acquisitions to Salesforce's standards for security and inform integration priorities.

The ideal candidate is an innovative self-starter who balances deep technical security expertise with a collaborative, empathetic approach to partner integration.

Core Responsibilities & Scope

• Create comprehensive integration plans for security workstreams with risk-based integration priorities during the acquisition integration lifecycle.
• Drive and close the security work required to bring acquired businesses under our organizational MSA, DPA, and SPARC frameworks.
• Perform comprehensive infrastructure assessments on acquired environments.
• Communicate clearly, empathetically, and effectively with newly acquired business partners to bridge security gaps collaboratively.
• Prioritize critical security work in a highly dynamic, fast-paced M&A environment.
• Execute robust threat models using the STRIDE methodology.
• Independently drive your own work streams from start to finish without requiring heavy oversight.
• Continuously innovate on our M&A security workflows, integration processes, and automation capabilities.

Minimum Requirements

• Degree in Cybersecurity, Computer Science or a relevant subject area, or equivalent experience.
• Basic coding knowledge for application security (e.g., scripting, Bash, Terraform).
• Deep understanding of the CIA Triad (Confidentiality, Integrity, and Availability).
• Demonstrated ability to prioritize complex security workflows and remediation efforts.
• Proficiency in executing threat models using STRIDE.
• Strong understanding of direct and transitive dependencies, as well as broader supply chain risks.
• Ability to independently perform infrastructure assessments.
• Well-versed in Cloud Security Posture Management (CSPM).
• Excellent communication skills, ability to tailor messaging for newly joining partners, requiring patience and leadership.
• Versed in integrating and interpreting SAST (Static Application Security Testing) and DAST (Dynamic Application Security Testing) tooling.
• Strong understanding of Zero Trust network architecture.
• Expertise across Control, Data, and Application plane security.
• Proficiency in secrets management best practices.
• Deep knowledge of the path to production and build pipeline security (spanning source, build, artifact repository, and production deployment).
• Experience with code and binary signing practices.
• Experience with bug categorization and severity mapping.
• Proficiency in data classification standards.
• Clear understanding of what MSA, DPA, and SPARC frameworks entail for enterprise security.
• Familiarity with SOC2 compliance requirements and controls.

Preferred Qualifications

• Preferred Information security certifications (e.g., OSCP, OSEP, GPEN, GXPN, CISSP) or cloud security certifications.
• Preferred Contributions to the infosec community (participation in bug bounty programs, public research, blogging, presentations, etc.).
• Experience in M&A, due diligence, or integration security, or in third-party security assessment under tight deal timelines.

Posting Statement

In the United States, compensation offered will be determined by factors such as location, job level, job-related knowledge, skills, and experience. Certain roles may be eligible for incentive compensation, equity, and benefits. Salesforce offers a variety of benefits to help you live well including: time off programs, medical, dental, vision, mental health support, paid parental leave, life and disability insurance, 401(k), and an employee stock purchasing program. More details about company benefits can be found at the following link: https://www.salesforcebenefits.com.Pursuant to the San Francisco Fair Chance Ordinance and the Los Angeles Fair Chance Initiative for Hiring, Salesforce will consider for employment qualified applicants with arrest and conviction records.