The stream of new security threats is never-ending, thus security must be a process that incorporates the reality that employees sometimes have days when they a

The stream of new security threats is never-ending, thus security must be a process that incorporates the reality that employees sometimes have days when they aren't working. Clearly, the OP is not being paid for 24/7 on-call security consulting, so why should they sacrifice their day off to investigate and patch security vulnerabilities?