Protect company property by identifying, preventing, detecting and responding to risks and security events targeting the business and GitLab.com and its users. We are at the forefront of GitLab's security.
The Security Operations Sub-department focuses on the operational aspect of security. Our Sub-department consists of experienced breakers, builders, and defenders from all walks of life and geographic locations. We are responsible for improving GitLab's security capabilities and metrics in the areas of:
The following people are permanent members of the Security Operations Sub-department:
| Person | Role |
|---|---|
| Jan Urbanc | Director of Security Operations |
| Jan Urbanc | Security Manager, Security Incident Response Team (Acting) |
| Charl de Wit | Security Manager, Trust & Safety |
| Steve Manzuik | Security Manager, Red Team |
The following people are permanent members of teams that belong to the Operations Sub-department:
| Person | Role |
|---|---|
| Steve Manzuik | Security Manager, Red Team |
| Greg Johnson | Senior Security Engineer, Red Team |
| Frederic Loudet | Senior Security Engineer, Red Team |
| Chris Moberly | Senior Security Engineer, Red Team |
| Person | Role |
|---|---|
| Charl de Wit | Security Manager, Trust & Safety |
| Roger Ostrander | Senior Security Engineer, Trust & Safety |
| Westley van den Berg | Senior Security Analyst, Trust & Safety |
| Shawn Sichak | Security Engineer, Trust & Safety |
| Person | Role |
|---|---|
| Jan Urbanc | Security Manager, Security Incident Response Team (Acting) |
| Muhammad Dewji | Security Engineer, Security Incident Response Team |
| Corey McCarty | Senior Security Engineer, Security Incident Response Team |
| Marley Riser | Security Engineer, Security Incident Response Team |
| Mitra JozeNazemian | Senior Security Engineer, Security Incident Response Team |
| Harjeet Sharma | Senior Security Engineer, Security Incident Response Team |
For activities and tools that require confidentiality and availability independent of GitLab.com resources, an independent GCP environment
The main project for tracking work is security-enclave>.
