Commit f92d5899 authored by Daryn Wilkinson's avatar Daryn Wilkinson
Browse files

Removed the word Overview from the title

parent 2e7a8730

content/handbook/security/security-operations/security-logging/_index.md

+7 −6
Original line number Diff line number Diff line 
---

title: "Security Logging Overview"

title: "Security Logging"

description: "Security Logging supports and develops GitLab's security log ingestion platform."

---
@@ -27,7 +27,9 @@ Further details can be found in the [job family description](/job-description-li 
| | |

|---|---|

|Daryn Wilkinson|[Manager, Security Engineering](/job-description-library/security/security-logging/)|

|Hiroki Suezawa|[Senior Security Engineer](/job-description-library/security/security-logging/)|

|Hiroki Suezawa|[Staff Security Engineer](/job-description-library/security/security-logging/)|

|Senior Engineer 1 (redacted for privacy)|[Senior Security Engineer](/job-description-library/security/security-logging/)|

|Senior Engineer 2 (redacted for privacy)|[Senior Security Engineer](/job-description-library/security/security-logging/)|



## Core Responsibilities
@@ -36,9 +38,8 @@ Further details can be found in the [job family description](/job-description-li 
**SIEM Platform Management**



- Ownership, management, and maintenance of GitLab's SIEM platforms and security logging infrastructure

- Leading the ongoing migration to Elastic and optimization of our security information and event management capabilities

- Subject matter expertise regarding SIEM operation and management in support of security operations workflows

- Capacity planning and forecasting of licensing and infrastructure costs (shared responsibility with InfraSec)

- Capacity planning and forecasting of licensing and infrastructure costs



**Log Source Integration and Management**
@@ -70,7 +71,7 @@ Further details can be found in the [job family description](/job-description-li 
**Cross-Team Coordination Within Security Operations**



- Working closely with SIRT to ensure log aggregation infrastructure supports incident response workflows

- Collaborating with security operations teams to identify and address logging gaps

- Collaborating with Security teams to identify and address logging gaps

- Supporting continuous security monitoring and threat hunting through comprehensive log availability



**Compliance and Governance Coordination**
@@ -113,7 +114,7 @@ We operate as an internal customer-focused and customer-driven team within secur 


**Regular Synchronous Activities:**



- Weekly team sync: Progress discussion, blocker resolution, security operations coordination

- Regular team sync: Progress discussion, blocker resolution, security operations coordination

- Bi-annual retrospectives: Team check-in and improvement planning with security operations alignment

- Individual contributor 1-1s with Engineering Manager

- Regular coordination with Security Operations leadership on strategic initiatives