Security Incident Response Team - SIRT

1. You are here:
2. Engineering
3. Security
4. Security Operations Sub-department
5. Security Incident Response Team - SIRT

On this page

• Our Vision
  • Our Mission Statement
• The Team
  • Team Members
• Services We Provide:
• Engaging SIRT
• Incident Management and Review

---

The Security Incident Response Team - SIRT is on the forefront of security events that impact both GitLab.com and GitLab the company.

Our Vision

To detect security incidents before they happen and to respond promptly when they do happen.

Our Mission Statement

Ensure maximum operational uptime of mission critical infrastructure and informational assets in its daily operations. This mission is achieved by providing effective crisis response, timely distribution of security notifications, continuous monitoring of potential issues, postmortem of major incidents for training and environmental awareness.

The Team

Team Members

The following people are permanent members of the SIRT

Person	Role
Joaquin Fuentes	Director, SIRT
Andrew Kelly	Acting Manager, SIRT
Valentine Mairet	Acting Manager, SIRT
Mitra Jozenazemian	Senior Security Engineer, SIRT
Corey McCarty	Senior Security Engineer, SIRT
Harjeet Sharma	Senior Security Engineer, SIRT
Aaron Blanco	Senior Security Engineer, SIRT
Tuan Lam	Senior Security Engineer, SIRT
Bala Allam	Security Engineer, SIRT
Laurens Van Dijk	Security Engineer, SIRT

Services We Provide:

1. Reactive - Services design to respond to active incident handling, including but not limited to
   • Incident analysis
   • Incident response support and coordination
   • Incident response resolution
2. Proactive - Services designed to improve the infrastructure and security processes of Gitlab before any incident occurs or is detected. The main goals are to avoid incidents and to reduce the impact and scope when they do occur.
   • Cyber Threat Analysis of vulnerability warnings and security advisories
   • Monitor Adversaries' activities and related trends to help identify future threats
   • Configuration and maintenance of security tools, applications, and infrastructure
3. Administrative - Services design to assist with requests from Gitlab's Legal and HR Departments.

Engaging SIRT

The SIRT is on-call 24/7/365 to assist with any security incidents. If an urgent security incident has been identified or you suspect an incident may have occurred, please refer to Engaging the Security Engineer On-Call.

Information about SIRT responsibilities and incident ownership is available in the SIRT On-Call Guide.

Incident Management and Review

As part of the incident management and review process the SIRT maintains a recurring meeting that takes place on Monday of each week. During this meeting all of the previous weeks incidents, and any incidents that are currently open are reviewed. The review process covers the incident's scope, impact, the work performed to mitigate and remediate the incident, next steps, blockers, and current status. These meetings are also an opportunity to discuss mishandled incidents and process improvements.