> There is a lot more to security than things that have to do with software engineering. I didn't say there weren't? > In my experience, the companies with th

> There is a lot more to security than things that have to do with software engineering. I didn't say there weren't? > In my experience, the companies with the worst security are ones that primarily employ current or former software engineers as leaders of their security teams with a misguided mentality that security is just a subset of software engineering. Wasn't what I was advocating for. I'm advocating for learning security after you have a base of software development. Not leading a security team with no experience learning or practicing security. Also, this is a huge and growing field, so I'm speaking generally, but I'm sure there are sub-areas where there are counter examples.