That doesn’t really work for large companies unless your employer plans on suing you for $100mm+ after a breach. But big companies have internal security teams

That doesn’t really work for large companies unless your employer plans on suing you for $100mm+ after a breach. But big companies have internal security teams which basically handle all of this behind the scenes (until you get road blocked weeks/months when they come out of the woodwork to make your new product secure - a very necessary annoyance)