Security Operations

Mission

Protect the GitLab company, brand, service and all customers through effective security operations to enable trusted software delivery at the speed of innovation.

Department Structure

Our department consists of experienced breakers, builders, and defenders from all walks of life and geographic locations. We are responsible for improving GitLab’s security capabilities, security anomaly/event detection and monitoring, incident response and abuse mitigation of GitLab.com.

Our department consists of:

• Security Incident Response Team (SIRT) - Security incident response and forensic analysis
• Trust & Safety - Prevention and mitigation of abuse of the GitLab.com platform
• Red Team - Adversary emulation
• Threat Intelligence - Actionable insights on real-world threats
• Signals Engineering - Detection Engineering
• Security Logging - SIEM and logging management

Contacting Security Operations

• Slack channel to interact with the Security Operations Department #security-help and tag @security-operations
• The Security Operations department follows the Security Team On-Call Rotation with more details available in Security Operations On-Call
• How to Engage the Security Engineer On-Call

Common Links

• GitLab Security Division Group (GitLab)
• GitLab Security Operations Department Group (GitLab)