There’s many companies where security engineers never write a line of code and never pen test. They can be caught up in process and theory in the same way some

There’s many companies where security engineers never write a line of code and never pen test. They can be caught up in process and theory in the same way some scrum masters can. They often lack an understanding of the code and architecture and don’t have a feel for the situation in the ground. The same kind of thing happens to certain managers and scrum masters that don’t get their hands dirty from time to time and have no feeling for what is bogging down the product.