Xperi Inc.
Sr Engineer - Security Vulnerability Management
Full details on LinkedIn
The complete job description, requirements, and application details are available on the original posting.
About Xperi Inc.
Xperi Inc. is a multinational technology company based in San Jose, California. It specializes in software for consumer electronics, connected cars, and media platforms for broadband video services. The company operates through four main business units: Pay TV, Consumer Electronics, Connected Car, and Media Platform. Notable brands under Xperi include DTS, HD Radio, and TiVo. Founded in 1990, Xperi has evolved through key acquisitions and rebranding, including the merger with TiVo Corporation in 2020. The company focuses on developing technologies that enhance user experiences in smart devices and automobiles, emphasizing immersive audio and video. Xperi offers a range of solutions, including user experience tools for Pay TV operators, audio technologies for consumer electronics, and automotive infotainment platforms. With over 1,800 employees and a portfolio of more than 2,200 patents, Xperi powers over a billion devices globally and generates significant annual revenue.
Security at Xperi Inc.
Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.
Security Philosophy
- Xperi implements and maintains appropriate technical and organizational security measures as stated in their Data Processing Agreement.
- The company emphasizes processes for identifying, assessing, and managing material risks from cybersecurity threats.
- Security initiatives focus on integration of security into CI/CD pipelines and development workflows, collaboration between vulnerability management teams, and prioritization of remediation based on threat intelligence.
Security Team
Xperi's corporate information security organization is led by the Chief Information Officer (CIO). Payman Armin serves as SVP and CISO. The company maintains active application security and information security teams across multiple locations, with job postings indicating roles in vulnerability management, product security, and information security. Specific team size estimates for the AppSec function are not publicly available.
Key Initiatives
- Xperi is implementing shift-left security practices with champions integrating security into CI/CD pipelines and development workflows.
- The company maintains a vulnerability management process that includes collaboration with security teams to prioritize remediation based on threat intelligence.
- Secure SDLC practices include secure code review processes, static/dynamic analysis, and container security scanning.
Preparing for an AppSec interview?
Get the weekly briefing 2,000+ security pros trust.