> For people who actually care about security and not just compliance, there's no real job market at all. Companies never hire for this kind of role. Can't agr

> For people who actually care about security and not just compliance, there's no real job market at all. Companies never hire for this kind of role. Can't agree more! This is the sad truth as you say. This is the space I work in and to find a team who actually cares about building a secure product against reasoned threat models is as rare as winning the lottery. Roles with great pay are easy to find in the policy and process side of security though.