Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.
3 Intel Signals
How they approach application security
The team focuses on driving security through structured frameworks and regulatory alignment.
The stated AppSec mission is to help drive forward focus on application security, threat modeling, and penetration testing.
The team emphasizes providing actionable guidance rather than just blocking—translating complex cybersecurity risks into clear, actionable guidance for engineering and business stakeholders. iRhythm utilizes a risk-based approach centered on threat modeling and NIST standards.
A key goal is the continuous improvement of the Secure Product Development Framework (SPDF) and integration into development workflows.
The team
The AppSec team includes specialized roles for Application and Product Security, with evidence of a centralized security leadership under a CISO (Orus Dearman).
Key team members include Amna Ziauddin, Senior Product Security Analyst.
The team is estimated as a small-to-midsize specialized team based on job volume.
There are 2+ active AppSec job postings including Senior Cyber Security Analyst and Staff Product Security Engineer roles.
Common skill/tool patterns emphasize NIST frameworks, threat modeling, and managing the Secure Product Development Framework (SPDF).
Exact reporting lines between Product Security and the CISO are not explicitly stated.
What they're working on
The team integrates security into the development framework through a Secure Product Development Framework (SPDF) and secure SDLC practices.
Vulnerability management includes scanning and coordinated disclosure (PSIRT).
The team is responsible for regulatory documentation and threat models to support FDA 510(k) filings.
Recent initiatives focus on supply chain security and SBOM management.
Specific MTTR (Mean Time to Remediate) or SLA metrics are No Security Champions Program evidence was found.