Product Security Test Engineer — Connected Devices

Anker Innovations; Ontario (CA); On-site; USD 250,000 - 400,000; Full time

Benefits offered by this job

10 Days Company Recognized Holidays

Paid time Off - up to 15 Days

401(k) and company match

Medical & Dental & Vision Insurance

Employee Assistant Program

Job summary

Anker Innovations is seeking a senior security tester to lead hands-on testing of devices, firmware, and cloud services, ensuring secure boot, provisioning, and data privacy across consumer products used in homes, cars, and mobile life. This role focuses on hands-on security testing and validation, with opportunities to work across the full attack surface.

Defining test scopes, managing third-party engagements, and translating findings into automated CI regression coverage are core

Qualifications

• 4+ years in security testing or security research.
• Ability to write tooling in Python or Go.
• Proven vulnerability discovery in authorized testing.

Responsibilities

• Define test scope and pass criteria by product risk level.
• Manage third-party penetration testing engagements and review deliverables.
• Device, firmware, BLE, and mobile testing across ecosystems.
• Convert findings into automated regression coverage in CI.
• Verify privacy, cryptographic erasure, and data removal practices.
• Test against security baselines including NIST IR 8425.

Skills

Security testing

Penetration testing

Hands-on testing

Python

Go

Tools

Ghidra

IDA Pro

Job description

Anker Innovations is a global leader in smart charging technologies and a developer of consumer products for the home, car, and mobile life. Founded in 2011, we've brought our products to 100+ countries and regions with more than 140 million users and a revenue of 2000+ million USD in 2022.

Anker Innovations has successfully built Anker, a world-renowned high-end innovative charging brand, and launched intelligent hardware brands such as Eufy, Nebula, and Soundcore to further explore smart charging, smart voice, smart home and other fields.

Today, we have a total of 4000+ employees in 15 offices across North America, Europe, Australia, Asia, LATAM and the Middle East. We are always looking for top talents like you.

For more information, please visit: https://us.anker.com/

Location: Onsite at Bellevue, Washington or San Jose, California

About the Role：

We build connected home and personal devices used in households across the US. Our product security team's scope spans the full attack surface of those products — the devices themselves, the companion mobile apps, and the cloud services behind them.

This role focuses on hands-on security testing and validation across all three.

Key Responsibilities:

• Define test scope and pass criteria by product risk level, and assess release readiness
• Scope and manage third-party penetration testing engagements, and review deliverables for technical rigor
• Device and firmware testing: debug interface exposure, non-volatile storage and runtime memory analysis, firmware reverse engineering, and verifying that secure boot and rollback protections hold under attempted bypass
• Wireless and provisioning testing: BLE pairing strength and downgrade resistance, credential exposure during Wi-Fi onboarding, Matter and Zigbee onboarding security
• Mobile testing: decompilation, runtime instrumentation, certificate pinning resilience, local artifact audit, per-release third-party SDK traffic analysis
• Authorization and access control testing across cloud APIs
• Lifecycle testing across provisioning, sharing, ownership transfer, factory reset, and device resale
• Convert findings into automated regression coverage in CI; build and run the device test lab
• Privacy verification: field-level traffic analysis against approved data collection
• Verifying cryptographic erasure and data removal at factory reset and end of life
• Testing against consumer IoT security baselines including NIST IR 8425

Basic Qualifications:

• 4+ years in security testing, penetration testing, or security research
• Hands-on testing experience — you've personally found and demonstrated vulnerabilities in systems you were authorized to test
• Able to write your own tooling in Python, Go, or equivalent
• Able to write a finding an engineer can act on without a follow-up meeting

Preferred Qualifications:

• Hardware security assessment and firmware reverse engineering (Ghidra/IDA, fault injection)
• BLE and wireless protocol testing
• iOS/Android instrumentation and mobile hardening evaluation
• Multi-tenant authorization flaws in cloud APIs
• Stateful business-logic testing
• CI-integrated security automation and fuzzing
• Privacy traffic analysis.

Perks of Benefits:

Our company benefits are designed to convey company culture and values, to create an efficient and inspiring work environment, and to support our employees to give their best in both work and life. We offer the following benefits to eligible employees:

• 10 Days Company Recognized Holidays
• Paid time Off - up to 15 Days
• 401(k) and company match
• Medical & Dental & Vision Insurance Coverage
• Employee Assistant Program

The base salary range for this position in the selected city is $250,000 - $400,000 annually. Compensation may vary outside of this range depending on a number of factors, including a candidate’s qualifications, skills, competencies and experience, and location.

Base pay is one part of the Total Package that is provided to compensate and recognize employees for their work, and this role is eligible for additional discretionary bonuses/ incentives/ restricted stock units.

Anker Innovations is committed to a diverse and inclusive workplace. Anker Innovations is an equal opportunity employer and does not discriminate based on race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status. Please contact [e-mail] if you have any questions.