Senior Manager, Product Security

Xperi invents, develops and delivers technologies that create extraordinary experiences at home and on the go for millions of people around the world. Powering billions of consumer electronics, connected cars and digital content titles, we make entertainment more immersive, driving more intelligent and every interaction seamlessly personalized through our renowned consumer brands: DTS®, HD Radio™, IMAX® Enhanced and TiVo®.Xperi (NYSE: XPER) is a publicly traded technology company headquartered in San Jose, CA with over 1,800 employees across North America, Europe and Asia. Come join a thriving team where you can play an integral role in shaping the future of entertainment technology. Job Title: Senior Manager, Product Security Company Overview: Join our innovative team at Xperi, where we continuously seek to fuel the ultimate entertainment experience. We touch the lives of binge-watching, music-loving, entertainment fanatics every day by inventing and delivering beautiful user experiences. We enable the world’s leading media and entertainment providers to nurture more meaningful relationships with their audiences. We work hard, celebrate success, and challenge everyone in our organization to make an impact. If you are as passionate as we are about the intersection of technology and entertainment, join us today. Job Summary: We are seeking a strategic and experienced Senior Manager, Cloud Security to lead and evolve our enterprise-wide cloud security program. This role will be responsible for setting the vision, strategy, and execution of cloud security initiatives that protect Xperi’s infrastructure, services, and data. The ideal candidate will bring deep technical expertise, strong leadership capabilities, and a proven track record of driving security transformation across complex cloud environments. Key Responsibilities: 

• Define and lead the enterprise cloud security strategy in alignment with business and technology goals. 

• Build and manage a high-performing team of cloud security engineers. 

• Set clear goals, provide regular feedback, and support career development. 
• Foster a collaborative, inclusive, and security-conscious team culture. 

• Serve as the principal advisor to executive leadership on cloud security risks, controls, and mitigation strategies. 
• Oversee the design and implementation of scalable, secure cloud architectures across AWS, Azure, and GCP. 
• Establish and enforce cloud security policies, standards, and governance frameworks. 
• Lead enterprise-wide threat modeling, risk assessments, and incident response planning for cloud environments. 
• Partner with IT, DevOps, and product teams to ensure secure integration of cloud solutions. 
• Drive continuous improvement through security automation, monitoring, and analytics. 
• Ensure compliance with relevant regulations (e.g., GDPR, CCPA, HIPAA) and industry standards (e.g., ISO 27001, NIST). 
• Represent cloud security in audits, board-level discussions, and cross-functional initiatives. 

 DevSecOps Leadership Responsibilities: 

• Champion the integration of security into CI/CD pipelines and development workflows. 
• Define and implement DevSecOps best practices, tools, and automation strategies across engineering teams. 
• Collaborate with development and operations teams to embed security controls early in the software development lifecycle. 
• Oversee secure code review processes, static/dynamic analysis, and container security scanning. 
• Promote a culture of secure coding and continuous security testing through training and enablement. 
• Evaluate and implement security tooling that supports automated compliance, vulnerability management, and threat detection in DevOps environments. 

 Collaboration with Business Stakeholders: 

• Engage with business leaders to understand strategic objectives and align security initiatives accordingly. 
• Translate complex security concepts into actionable insights for non-technical stakeholders. 
• Champion a culture of security awareness and accountability across the organization. 
• Guide business units in developing secure-by-design practices and cloud-native security solutions. 

 Qualifications: 

• 8+ years of experience in IT security, with at least 3 years in a leadership role focused on cloud security. 
• Deep expertise in cloud platforms (AWS, Azure, GCP) and modern security architectures (e.g., zero trust, container security). 
• Strong understanding of identity and access management, data protection, and compliance frameworks. 
• Demonstrated success in building and leading security teams and programs at scale. 
• Experience implementing DevSecOps practices and integrating security into CI/CD pipelines. 
• Excellent communication, stakeholder management, and executiv