GitLab Security Department, 4 Oct 2019

Previous Meeting Next Meeting

⏯

youtube image

►

From YouTube: What Does Security External Communications Do?

Description

Devin Harris (Senior Security Analyst, Field Security - https://about.gitlab.com/handbook/engineering/security/#field-security) and Heather Simpson (Senior Security Analyst, External Communications - https://about.gitlab.com/handbook/engineering/security/#security-external-communications) discuss what exactly the External Security Communications Team does at GitLab.

Heather mentions several key links which are here:
- https://gitlab.com/gitlab-com/gl-security/security-communications/communications/issues
- https://about.gitlab.com/blog/categories/security/

A

Devin: alright, I'm devin harris, I'm a security analyst here, gitlab and today.

A

I'm talking with heather simpson. heather,. Would you like to introduce yourself?

A

heather: sure, hi? My name is heather and I am a senior external communications analyst for our.

B

Security team. devin: awesome,, as you know, heather, we're trying to increase.

A

Security awareness here at gitlab and I just had three simple questions for you:.

A

About what your team does. so in your own words,? What does security external.

A

Communications do? heather: yeah, so I think one of my main goals here is to increase.

B

Engagement and an awareness around our security organization, which means our.

B

Teams and our programs to do that. I work across our security organization.

B

But as well as with our marketing community and advocates team and another.

B

Key responsibility is managing our security release, the notifications and.

B

The email touch or excuse me, the the client touch points on that part with.

B

The security release and the incident response the communications that go.

B

Along with those devin:, okay cool that makes sense,, can you tell me about a really.

A

Cool project that your team has recently worked on or completed? heather: yeah, so um part.

B

Of that part of what's great about my job, is I get to work across our security.

B

Org and so that's developing content for blogs- that's always fun interesting to.

B

Find out what people are working on we're also as part of the bug bounty.

B

Program we have an engagement factor so currently we're running a contest for a.

B

Reporter community, that will reward a few of our our top hackers, with with a.

B

Pretty sweet piece of gitlab swag, so that's fun to work on things like that.

B

And then the last thing is just doing different things that we haven't done.

B

Before here at gitlab, so for the first time we're gonna be doing a reddit ama.

B

Around zero trust and that's happening october 29th, and so it's pretty exciting.

B

Devin: awesome: that's really cool. That sounds like a lot of fun. lastly,. I wanted to.

A

Know when and how would somebody contact your team? heather: yeah? So when is you know if.

B

You have a great idea on something that, if you're outside of security, that you.

B

Know that security does- and you think it's really interesting and the industry.

B

Or the world at large should know about it. I'd love to hear about it.

B

Do that through blog post or something like an ama, something like.

B

That so, if you have a great idea that you think we should be focusing on in terms of awareness and engagement, I'd love to hear about it. And you would.

B

Contact me through you know either our #security channel in slack or.

B

Through an issue and there's security, communications program, space and one.

B

Other area, I guess, is if, if you have questions about any of our programs,.

B

Please you know reach out devin:, okay, awesome! Well, thank you for taking the time to.

A

Talk to me today, I look forward to doing more work with you here in the future heather: great thanks, devin devin:, bye.