GitLab Security Department, 4 Oct 2019

Previous Meeting Next Meeting

⏯

youtube image

►

From YouTube: What Does Field Security Do?

Description

Heather Simpson (Senior Security Analyst, External Communications - https://about.gitlab.com/handbook/engineering/security/#security-external-communications) and Devin Harris (Senior Security Analyst, Field Security - https://about.gitlab.com/handbook/engineering/security/#field-security) discuss what exactly the Field Security Team does at GitLab.

- Slack: #security-department, #security

A

Heather:, hey there everybody,, so my name is heather simpson and I am a senior external comms analyst here at gitlab.

A

And today I'm talking to devin harris devin: do you want to introduce yourself? devin: yeah. thanks heather., I'm devin harris.

B

I'm a field security compliance analyst here at gitlab, heather: cool., thanks devin.

A

So what we're trying to do here is increase awareness around our security organization,, the initiative, the initiatives that we work on.

A

Can you answer a few questions for us? devin: absolutely. yeah. heather:, all right, great. so,? Can you describe briefly what your team works, on?.

A

Devin: yeah, absolutely., so field security is a new role here at gitlab,, our biggest.

B

Mandate is to be the public face of the security department.

B

That's both to gitlab team members, as well as our customers and.

B

Really we have a pretty multidisciplinary set of things that were responsible for, but anything around, increasing security, awareness,.

B

Giving training, helping customers understand how we help secure their data and why we do things the way we do.

A

Heather: cool. awesome.. I know we're going to work together more in the future.

A

Cool,, so can you tell me about what are really interesting or cool project or initiative that you're working on currently?.

B

Devin: absolutely. yeah,, so I'm working on two things right now that are pretty cool.

B

One of them is this video series. What security department does helping to raise awareness around security.

B

And then the other one is I'm working with compliance to help generate some.

B

Compliance paperwork that we can send to customers to reduce the amount of security questionnaires that we need to fill out.

B

And really help scale how quickly we can respond to our customers. Needs.

B

Heather; oh, yeah, that'll be really valuable.

A

Great, and then the last question for you is when and how should somebody go about contacting you?.

A

Devin: yeah, absolutely. so,.

B

Being a new role., I don't have a field security handle. Yet on slack.

B

But you can always dm me @dsharris on slack,. You can email me,.

B

You can reach out to me through the #security-department channel, as well as the #security channel.

B

Happy to help you out with anything and anytime, you have any questions about security or whether or not something does impact security.

B

Feel free to reach out to me- and I can get you pointed to the subject matter- experts, if it's something beyond my comprehension.

A

Heather; great. awesome. well, thanks devin, and thank you for joining us. devin:. All right. thanks heather.