• Own Alloy's security program in its entirety • Design and implement IAM controls that enforce least-privilege • Run a structured vulnerability management program • Maintain Alloy's information security policy landscape • Own our SOC 2 type designations • Design and implement IAM controls • Own Alloy's approach to protecting proprietary scientific data • Maintain visibility across Alloy’s environment through logging, alerting, and monitoring tooling • Work closely with Alloy's AI teams to ensure security in AI-forward environment • Evaluate new SaaS applications and ensure software landscape doesn't introduce unacceptable risk • Design and operate elevated controls for sovereign and government-aligned engagements

• Develop and maintain a multi-year roadmap for Platform Security capabilities including certificate lifecycle management, PKI infrastructure, secrets management, token security, and cryptographic compliance (FIPS 140-3, TLS modernization) • Manage strategic decisions to ensure the highest impact from security engineering investments in a dynamic and fast-paced environment • Lead product strategy for secure-by-default foundation services • Drive security strategy for AI agent workloads and runtime environments • Partner closely with engineering, architecture, compliance, and product teams to deliver security-critical outcomes • Drive product development end-to-end • Influence direction and elevate standards through clear roadmap narratives, technical proposals, and risk-impact evaluations • Champion a platform-wide security culture focused on resilience, crypto-agility, and continuous improvement

• Performing vendor risk assessments for new vendors and reviewing the risk of current vendors • Evaluating alerting processes and systems, developing security automation processes • Policy & Runbook development, incident reporting, pen testing analysis • Building new monitoring capabilities, developing alerts, integrating new feeds • Providing security guidance for compliance issues

Role Description On behalf of our Technology client, Procom is searching for a Product Security Engineer for a 6 month contract role. This position is a remote position located in Toronto, Ontario, Canada. The Corporate Security team of Silicon Labs seeks a Product Security Engineer to join their security engineering activities. The new hire will actively participate in the PSIRT and lead penetration team activities, focusing on security improvements across various product solutions. Responsibilities - Support Product Security Incident Response Team (PSIRT) activities related to driving team actions to address security issues - Recommend corrective actions to address identified security vulnerabilities - Assist with vulnerability resolution tracking of discovered security vulnerabilities via metrics and other applicable approaches with the PSIRT - Work to drive security mitigations and security by design - Participate in software and/or hardware architectural reviews as needed - Provide training and guidance to teams on security best practices and industry updates - Collaborate over multiple time zones and geographies to support our security design best practices Qualifications - Bachelor's degree in Computer Science, Computer Security, Computer or Electrical Engineering - At least 4 years of experience in testing, developing, or validating Wireless stacks including Z-Wave, Zigbee, Wi-Fi, or others - Experience developing exploits for ARM or x86 devices - Coding ability in C, C++, as well as application-level programming (Java, Python, etc.) - Experience in secure coding, code reviews, and software architectural reviews - Ability to perform and oversee threat analysis risk assessments (TARAs) - Strong analytic and problem-solving skills Nice-to-Have Skills - Experience with using fuzzers for bug discovery (preferably with embedded devices) - Familiarity with OWASP Top 10 and SANS Top 25 security reports - Security-related certifications - Experience in security incident response support or issue management - Strong presentation skills for sharing knowledge to small and large audiences Assignment Length This is a 6 month contract position. Start Date ASAP. Assignment Location Toronto, Ontario, Canada. This position is remote.