Sr Engineer - Application Security

Xperi invents, develops and delivers technologies that create extraordinary experiences at home and on the go for millions of people around the world. Powering billions of consumer electronics, connected cars and digital content titles, we make entertainment more immersive, driving more intelligent and every interaction seamlessly personalized through our renowned consumer brands: DTS®, HD Radio™ and TiVo®.Xperi (NYSE: XPER) is a publicly traded technology company headquartered in San Jose, CA with over 2,000 employees across North America, Europe and Asia. Come join a thriving team where you can play an integral role in shaping the future of entertainment.Xperi Product Security team is looking for a multifaceted skilled Sr. Application Security Engineer to protect the Organization's Products. As an application security engineer, you are responsible for identifying potential threats and vulnerabilities in applications, designing secure software systems, and implementing robust security measures. You also conduct security audits and penetration testing to ensure the security of applications and sensitive data. Here is what you’ll get to do:

• Collaborate with Development and Operation Teams to build and operate secure products.
• Maintain the trust of Customers by protecting sensitive data and protecting the Organization from breaches.
• Conduct Security reviews and Threat Modeling.
• Help integrate security tools and processes.
• Respond to Security Incidents.
• Train Development team members on secure coding best practices.
• Research and recommend tools and best practices to help develop secure software systems.
• Advocate and promote Application security best practices.

 

Here is what you’ll need to be successful:

• BS degree in Computer Science or Cybersecurity field.
• Proven work experience as an Application Security Engineer.
• Understanding of Web and Mobile Application, Embedded design, and Cloud Architecture.
• Familiarity with security standards and Frameworks (OWASP, Automotive, and Embedded design security).
• Software development or Application Security experience in one of the following core languages: C and Java.
• Experience with Kubernetes, IaC and Serverless security.
• Experience designing and delivering secure products meeting customer requirements.
• Experience in Cloud Security (AWS, GCP).
• Proficiency with Security Tools - Threat Modeling, SAST, DAST, SCA, Fuzzing, and Penetration testing tools.
• Experience in CI/CD pipeline security best practices.
• Strong analytical and problem-solving skills.
• Continuous learning and adaptability (new technology AI).
• Good Teamwork, collaboration, and communication skills.
• Nice to have: OSCP,  CISSP, and OSWE certifications 

 

Life @ Xperi:At Xperi, we value People, Customers, Performance and Innovation. We are dedicated to creating a workplace where all employees have a voice and sense of belonging, feel safe and valued, and are acknowledged for how their unique differences contribute to organizational culture and business outcomes.Our employees and their families are important to us, and our comprehensive pay, stock and benefits programs reflect that. Xperi supports personal well-being, builds financial security and enables employees to share in our collective success.Rewards include:

• Competitive compensation (salary, equity and bonuses) and comprehensive benefits are designed to foster work-life balance, care for your health, protect your finances, and help you save and invest for the future.
• Generous paid time away from work, including flexible time off, holidays and sick time, health and wellness initiatives, and a charitable match program to help you give back to your community.
• Great perks, which vary by location and can be site-specific: employee discounts, transportation reimbursements, subsidized cafes, and fitness facilities.
• A flexible, hybrid work environment combining the best of in-office collaboration and community-building along with the benefits of working from home.