The Govern engineering groups are responsible for the Govern Stage of the product.
Help users manage security vulnerabilities, policies, and compliance across their organization.
| Person | Role |
|---|---|
| Nathan Rosandich | Fullstack Engineering Manager, Govern:Compliance |
| Aaron Huntsman | Senior Backend Engineer, Govern:Compliance |
| Elwyn Benson | Senior Frontend Engineer, Govern:Compliance |
| Harsimar Sandhu | Backend Engineer, Govern:Compliance |
| Huzaifa Iftikhar | Senior Backend Engineer, Govern:Compliance |
| Michael Becker | Senior Backend Engineer, Govern:Compliance |
The following members of other functional teams are our stable counterparts:
| Person | Role |
|---|---|
| Matt Wilson | Principal Product Manager, Govern:Threat Insights |
| Alex Fracazo | Senior Product Designer, Govern:Compliance |
| Andy Volpe | Staff Product Designer, Secure:Composition Analysis, Configure, Monitor, Secure, Govern |
| Becka Lippert | Senior Product Designer, Govern:Threat Insights |
| Harsha Muralidhar | Senior Software Engineer in Test, Govern:Threat Insights |
| Nikhil George | Senior Security Engineer, Application Security, Secure (Static Analysis, Dynamic Analysis, Composition Analysis, Fuzz Testing, Threat Insights, Vulnerability Research), Govern (Security Policies) |
| Joseph Longo | Manager, Governance and Field Security |
Because we have a wide range of domains to cover, it requires a lot of different expertise and skills:
| Technology skills | Areas of interest |
|---|---|
| Ruby on Rails | Backend development |
| Go | Backend development |
| Vue, Vuex | Frontend development |
| GraphQL | Various |
| SQL (PostgreSQL) | Various |
| Docker/Kubernetes | Threat Detection |
We also track our backlog of issues, including past due security and infradev issues, and total open SUS-impacting issues and bugs.
MR Type labels help us report what we're working on to industry analysts in a way that's consistent across the engineering department. The dashboard below shows the trend of MR Types over time and a list of merged MRs.
We meet bi-weekly synchronously to discuss stage and group wide topics. We primarily try to use Epics/Issues to intiate discussions and maintian transparency. We use the Anti-abuse-govern-growth-sub-dept Board to better organize our discussions.
gitlab-org/governgitlab.com_ed6207uel78de0j1849vjjnb3k@group.calendar.google.com