I agree with your edit, that was my point. When writing detection rules or automating things, I have to know that. When managing vulns or triaging incidents not

I agree with your edit, that was my point. When writing detection rules or automating things, I have to know that. When managing vulns or triaging incidents not so much. There are roles where you have to do one thing or all those things. The constant is that you need an ability to pick on the basics of new tech and some intuition of good enginnering and security practices.