roles: Split security team by areas

CODEOWNERS

@@ -36,7 +36,9 @@
 /ladder/teams/proxy.yaml @cilium/proxy
 /ladder/teams/pwru.yaml @cilium/pwru
 /ladder/teams/release-managers.yaml @cilium/release-managers
-/ladder/teams/security.yaml @cilium/security
+/ladder/teams/security-cilium.yaml @cilium/security-cilium
+/ladder/teams/security-org.yaml @cilium/security-org
+/ladder/teams/security-tetragon.yaml @cilium/security-tetragon
 /ladder/teams/sig-agent.yaml @cilium/sig-agent
 /ladder/teams/sig-bgp.yaml @cilium/sig-bgp
 /ladder/teams/sig-cilium-cli.yaml @cilium/sig-cilium-cli

ladder/reviewers.yaml

@@ -68,6 +68,7 @@ reviewers:
 - paularah
 - paulcacheux
 - pchaigno
+- peoyekunle
 - pippolo84
 - qmonnet
 - rastislavs

ladder/teams/security-cilium.yaml

@@ -0,0 +1,13 @@
+members:
+- aanm
+- christarazi
+- gandro
+- joestringer
+- jrajahalme
+- julianwiedmann
+- nebril
+- nezdolik
+- pchaigno
+- rolinh
+- sayboras
+- youngnick

ladder/teams/security-org.yaml

@@ -0,0 +1,5 @@
+members:
+- aanm
+- ferozsalam
+- joestringer
+- peoyekunle

ladder/teams/security-tetragon.yaml

@@ -0,0 +1,5 @@
+members:
+- kevsecurity
+- kkourt
+- mtardy
+- olsajiri

roles/Security-Team.md

@@ -1,19 +1,26 @@
 # Security Team
 
-The security team roles and responsibilities are listed in [CONTRIBUTOR-ROLES.md](/CONTRIBUTOR-ROLES.md#security-team). The following are the current security team members:
+The security team roles and responsibilities are listed in
+[CONTRIBUTOR-ROLES.md](/CONTRIBUTOR-ROLES.md#security-team).
 
-* [André Martins](https://github.com/aanm)
-* [Daniel Borkmann](https://github.com/borkmann)
-* [Feroz Salam](https://github.com/ferozsalam)
-* [Jarno Rajahalme](https://github.com/jrajahalme)
-* [Joe Stringer](https://github.com/joestringer)
-* [John Fastabend](https://github.com/jrfastab)
-* [Julian Wiedmann](https://github.com/julianwiedmann)
-* [Kateryna Nezdolii](https://github.com/nezdolik)
-* [Kyle Simmons](https://github.com/kyle-c-simmons)
-* [Liz Rice](https://github.com/lizrice)
-* [Martynas Pumputis](https://github.com/brb)
-* [Maciej Kwiek](https://github.com/nebril)
-* [Peter Oyekunle](https://github.com/peoyekunle)
-* [Sebastian Wicki](https://github.com/gandro)
-* [Tam Mach](https://github.com/sayboras)
+The following teams are the current security team members:
+
+* [security-org](/ladder/teams/security-org.yaml) handles communications,
+  security response, triage and provides oversight;
+* [security](/ladder/teams/security.yaml) provides technical assistance with
+  managing security vulnerabilities broadly across the Cilium organization,
+  with a particular focus on the `cilium/cilium` subproject.
+* [security-tetragon](/ladder/teams/security-tetragon.yaml) provides technical
+  assistance to manage security vulnerabilities for the `cilium/tetragon`
+  subproject.
+
+## Adding new members
+
+When adding new members to these teams, the proposed members must satisfy the
+criteria defined in the contributor roles. When a new member is added to the
+team through a PR to this repository, the following memberships may need to
+be updated:
+
+* Synchronize GitHub state with this repository
+* Update security mailinglist membership
+* Cilium security team Slack channel membership