AppSec Jobs

iRhythm Technologies, Inc. Security Team

Open security roles at iRhythm Technologies, Inc., and what we know about the team behind them.

medical devices · 2000 employees · 3 open roles. Updated October 16, 2026.

Security at iRhythm Technologies, Inc.

Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.

3 Intel Signals

How they approach application security

  • The team focuses on driving security through structured frameworks and regulatory alignment.
  • The stated AppSec mission is to help drive forward focus on application security, threat modeling, and penetration testing.
  • The team emphasizes providing actionable guidance rather than just blocking—translating complex cybersecurity risks into clear, actionable guidance for engineering and business stakeholders. iRhythm utilizes a risk-based approach centered on threat modeling and NIST standards.
  • A key goal is the continuous improvement of the Secure Product Development Framework (SPDF) and integration into development workflows.

The team

  • The AppSec team includes specialized roles for Application and Product Security, with evidence of a centralized security leadership under a CISO (Orus Dearman).
  • Key team members include Amna Ziauddin, Senior Product Security Analyst.
  • The team is estimated as a small-to-midsize specialized team based on job volume.
  • There are 2+ active AppSec job postings including Senior Cyber Security Analyst and Staff Product Security Engineer roles.
  • Common skill/tool patterns emphasize NIST frameworks, threat modeling, and managing the Secure Product Development Framework (SPDF).
  • Exact reporting lines between Product Security and the CISO are not explicitly stated.

What they're working on

  • The team integrates security into the development framework through a Secure Product Development Framework (SPDF) and secure SDLC practices.
  • Vulnerability management includes scanning and coordinated disclosure (PSIRT).
  • The team is responsible for regulatory documentation and threat models to support FDA 510(k) filings.
  • Recent initiatives focus on supply chain security and SBOM management.
  • Specific MTTR (Mean Time to Remediate) or SLA metrics are No Security Champions Program evidence was found.