Product Security Test Engineer - Connected Devices

We build connected home and personal devices used in households across the US. Our product security team’s scope spans the full attack surface of those products - the devices themselves, the companion mobile apps, and the cloud services behind them., * Define test scope and pass criteria by product risk level, and assess release readiness

• Scope and manage third-party penetration testing engagements, and review deliverables for technical rigor
• Device and firmware testing: debug interface exposure, non-volatile storage and runtime memory analysis, firmware reverse engineering, and verifying that secure boot and rollback protections hold under attempted bypass
• Wireless and provisioning testing: BLE pairing strength and downgrade resistance, credential exposure during Wi-Fi onboarding, Matter and Zigbee onboarding security
• Mobile testing: decompilation, runtime instrumentation, certificate pinning resilience, local artifact audit, per-release third-party SDK traffic analysis
• Authorization and access control testing across cloud APIs
• Lifecycle testing across provisioning, sharing, ownership transfer, factory reset, and device resale
• Convert findings into automated regression coverage in CI; build and run the device test lab
• Privacy verification: field-level traffic analysis against approved data collection
• Verifying cryptographic erasure and data removal at factory reset and end of life
• Testing against consumer IoT security baselines including NIST IR 8425

• 4+ years in security testing, penetration testing, or security research
• Hands-on testing experience - you’ve personally found and demonstrated vulnerabilities in systems you were authorized to test
• Able to write your own tooling in Python, Go, or equivalent
• Able to write a finding an engineer can act on without a follow-up meeting, * Hardware security assessment and firmware reverse engineering (Ghidra/IDA, fault injection)
• BLE and wireless protocol testing
• iOS/Android instrumentation and mobile hardening evaluation
• Multi-tenant authorization flaws in cloud APIs
• Stateful business-logic testing
• CI-integrated security automation and fuzzing
• Privacy traffic analysis.

Our company benefits are designed to convey company culture and values, to create an efficient and inspiring work environment, and to support our employees to give their best in both work and life. We offer the following benefits to eligible employees:

• 10 Days Company Recognized Holidays
• Paid time Off - up to 15 Days
• 401(k) and company match
• Medical & Dental & Vision Insurance Coverage
• Employee Assistant Program

The base salary range for this position in the selected city is $250,000 - $400,000 annually. Compensation may vary outside of this range depending on a number of factors, including a candidate’s qualifications, skills, competencies and experience, and location.

Base pay is one part of the Total Package that is provided to compensate and recognize employees for their work, and this role is eligible for additional discretionary bonuses/ incentives/ restricted stock units.

Anker Innovations is a global leader in smart charging technologies and a developer of consumer products for the home, car, and mobile life. Founded in 2011, we’ve brought our products to 100+ countries and regions with more than 140 million users and a revenue of 2000+ million USD in 2022.

Anker Innovations has successfully built Anker, a world-renowned high-end innovative charging brand, and launched intelligent hardware brands such as Eufy, Nebula, and Soundcore to further explore smart charging, smart voice, smart home and other fields.

Today, we have a total of 4000+ employees in 15 offices across North America, Europe, Australia, Asia, LATAM and the Middle East. We are always looking for top talents like you.