They have a 'security department' within their company, which is a security/analyst company. They have Richard Bejtlich running their network defense and policy.