Product Security Test Engineer, Connected Devices

Why Join us: Anker Innovations is a global leader in smart charging technologies and a developer of consumer products for the home, car, and mobile life. Founded in 2011, we've brought our products to 100+ countries and regions with more than 140 million users and a revenue of 2000+ million USD in 2022. Anker Innovations has successfully built Anker, a world-renowned high-end innovative charging brand, and launched intelligent hardware brands such as Eufy, Nebula, and Soundcore to further explore smart charging, smart voice, smart home and other fields. Today, we have a total of 4000+ employees in 15 offices across North America, Europe, Australia, Asia, LATAM and the Middle East. We are always looking for top talents like you. For more information, please visit: https://us.anker.com/ Location: Onsite at Bellevue, Washington or San Jose, California About the Role： We build connected home and personal devices used in households across the US. Our product security team's scope spans the full attack surface of those products — the devices themselves, the companion mobile apps, and the cloud services behind them. This role focuses on hands-on security testing and validation across all three. Key Responsibilities: Define test scope and pass criteria by product risk level, and assess release readinessScope and manage third-party penetration testing engagements, and review deliverables for technical rigorDevice and firmware testing: debug interface exposure, non-volatile storage and runtime memory analysis, firmware reverse engineering, and verifying that secure boot and rollback protections hold under attempted bypassWireless and provisioning testing: BLE pairing strength and downgrade resistance, credential exposure during Wi-Fi onboarding, Matter and Zigbee onboarding securityMobile testing: decompilation, runtime instrumentation, certificate pinning resilience, local artifact audit, per-release third-party SDK traffic analysisAuthorization and access control testing across cloud APIsLifecycle testing across provisioning, sharing, ownership transfer, factory reset, and device resaleConvert findings into automated regression coverage in CI; build and run the device test labPrivacy verification: field-level traffic analysis against approved data collectionVerifying cryptographic erasure and data removal at factory reset and end of lifeTesting against consumer IoT security baselines including NIST IR 8425 Basic Qualifications: 4+ years in security testing, penetration testing, or security researchHands-on testing experience — you've personally found and demonstrated vulnerabilities in systems you were authorized to testAble to write your own tooling in Python, Go, or equivalentAble to write a finding an engineer can act on without a follow-up meeting Preferred Qualifications: Hardware security assessment and firmware reverse engineering (Ghidra/IDA, fault injection)BLE and wireless protocol testingiOS/Android instrumentation and mobile hardening evaluationMulti-tenant authorization flaws in cloud APIsStateful business-logic testingCI-integrated security automation and fuzzingPrivacy traffic analysis. Perks of Benefits: Our company benefits are designed to convey company culture and values, to create an efficient and inspiring work environment, and to support our employees to give their best in both work and life. We offer the following benefits to eligible employees: 10 Days Company Recognized HolidaysPaid time Off - up to 15 Days401(k) and company matchMedical & Dental & Vision Insurance CoverageDonation MatchEmployee Assistant Program 【For Pay Transparency】Compensation Description (annually) The base salary range for this position in the selected city is $250,000 - $400,000 annually. Compensation may vary outside of this range depending on a number of factors, including a candidate’s qualifications, skills, competencies and experience, and location. Base pay is one part of the Total Package that is provided to compensate and recognize employees for their work, and this role is eligible for additional discretionary bonuses/ incentives/ restricted stock units. Anker Innovations is committed to a diverse and inclusive workplace. Anker Innovations is an equal opportunity employer and does not discriminate based on race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status. Please contact hr-recruit@anker-in.com if you have any questions.