Security Engineer - Mergers and Acquisitions (M&A)

Meta•Washington, DC

About The Position

Meta is seeking a highly experienced IC6 Security Engineer to lead our Mergers & Acquisitions (M&A) security program. In this role, you will be the technical security leader responsible for evaluating, integrating, and securing companies and assets as Meta pursues strategic acquisitions and partnerships. You will work cross-functionally with Corporate Development, Legal, Privacy, Infrastructure, and Product teams to ensure that security is a foundational consideration throughout the M&A lifecycle.

Requirements

8+ years of experience in information security, with at least 5 years in a technical leadership capacity
3+ years experience in M&A security
Proficiency with at least one scripting or coding language
Demonstrated experience leading security due diligence and integration for M&A transactions (buy-side or sell-side)
Expertise across multiple security domains: infrastructure security, application security, cloud security, identity & access management, data protection, and security operations
Experience with cloud-native architectures (AWS, GCP, Azure) and SaaS security assessments
Understanding of enterprise architecture patterns and their security implications
Communicate complex technical concepts to executive audiences and drive alignment across stakeholders
Experience operating in ambiguous environments with competing priorities
Bachelor's degree in Computer Science, Information Security, or related field (or equivalent practical experience)

Nice To Haves

Experience with M&A security at a large technology company with a high volume of acquisitions
Background in security consulting or advisory roles focused on M&A
Experience working across the broader security community

Responsibilities

Lead Security Due Diligence: Own the end-to-end security assessment process for M&A targets, including technical architecture reviews, vulnerability assessments, security program maturity evaluations, and risk quantification
Develop M&A Security Strategy: Define and continuously improve Meta's M&A security playbook, methodologies, and standards to enable rapid, consistent, and thorough security evaluations
Drive Integration Planning: Partner with target companies and internal teams to design secure integration roadmaps that balance speed-to-value with security requirements
Risk Assessment & Communication: Translate complex technical security findings into actionable business insights for executive leadership and deal teams
provide clear go/no-go recommendations with supporting rationale
Build Scalable Processes: Develop tooling, automation, and repeatable frameworks to scale M&A security operations as deal volume and complexity grow
Technical Leadership: Serve as a subject matter expert across multiple security domains (infrastructure, application, cloud, data protection, identity) as they relate to M&A activities
Cross-Functional Partnership: Collaborate closely with Corporate Development, Legal, Privacy, IT, and Engineering teams throughout the deal lifecycle
Post-Acquisition Security: Oversee security remediation and integration activities for acquired entities, ensuring alignment with Meta's security standards and policies
Mentorship: Provide technical guidance and mentorship to security engineers supporting M&A activities