> Markdown version of [/jobs/ext/4625071-product-security-engineer-connected-devices](https://www.wearedevelopers.com/jobs/ext/4625071-product-security-engineer-connected-devices). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Product Security Engineer - Connected Devices

- **Company:** Anker Innovations LTD
- **Location:** San Jose, CA, United States
- **Experience:** Expert
- **Salary:** $250,000
- **Contract:** Permanent contract
- **Skills:** Android Software Development, C++ (Programming Language), Cloud Engineering, Customer Data Management, Linux on Embedded Systems, Firmware, Identity and Access Management, Mobile Application Software, Python (Programming Language), Public Key Infrastructure, Real-Time Operating Systems, Cloud Services, Wi-Fi Technology, Software Security, Uptane, Backend, Kotlin, U-Boot, Devsecops, Golang
- **Published:** November 7, 2026
- **Apply:** https://www.juju.com/job/28_25304_1728a841985a7a908f405b1e894a8ffa-2258170058

## About the Role

* 5+ years in security engineering, or 7+ in software/embedded/cloud engineering with 3+ focused on security
 * Have owned a security capability end to end - design through maintenance
 * Production coding ability in at least one of C/C++/Rust, Go, Python, Kotlin, or Swift
 * Working knowledge of applied cryptography and its common failure modes
 * Able to explain a security requirement in terms a product team can build against, and hold it under schedule pressure, * Embedded security (TrustZone/TEE/SE, secure boot implementation)
 * PKI and HSM operations (PKCS#11/KMIP)
 * OTA and release infrastructure (TUF/Uptane)
 * DevSecOps and SBOM tooling
 * BLE/Wi-Fi/Matter protocol security
 * iOS and Android app hardening
 * IAM and multi-tenant authorization

## Description

We build connected home and personal devices used in households across the US. Our product security team's scope spans the full attack surface of those products - the devices themselves, the companion mobile apps, and the cloud services behind them., * Own cryptographic and identity standards used across our product lines, and the trust model connecting device, app, and cloud

 * Build and operate PKI, HSM integration, and manufacturing-line key provisioning
 * Own the OTA client and backend: image signing, rollback protection, A/B update recovery, staged rollout, and fleet update adoption
 * Develop and operate CI security gates, SBOM pipelines, and evidence infrastructure across firmware, mobile, and cloud
 * Implement hardware root of trust, secure boot, encrypted storage, and OS hardening on embedded Linux and RTOS
 * Own wireless and provisioning security: BLE pairing, Wi-Fi onboarding, Matter device attestation (DAC/PAI)
 * Own mobile app security: third-party SDK governance, secure storage, certificate pinning, session and token lifecycle
 * Design and implement cloud authorization models, device authentication, and least-privilege access controls for systems handling customer data
 * Implement technical controls for telemetry data minimization