It was security consulting, and there were two types of projects - the one week "pentest in a box" type engagements, and then much longer "process/implementatio

It was security consulting, and there were two types of projects - the one week "pentest in a box" type engagements, and then much longer "process/implementation work" which was focused on things like redoing somebody's RBAC from scratch, including lots of stakeholder interviews. The second type had its own issues - it can get pretty tedious going back to the same suburban office park every week for several months in a row.