During my formative years as a new SE, our focus - mine, the team's, the managers' - was always on functionality and features. I was coding with C++, Java, and

During my formative years as a new SE, our focus - mine, the team's, the managers' - was always on functionality and features. I was coding with C++, Java, and Python in those places. One of those companies sold (and still sells) critical equipment that's quite close to all of us :). Security was either a secondary concern or the responsibility of a dedicated team who were part of deployment. It's only gradually, over many years, that I built up my knowledge of secure coding, especially after I started dabbling in front-end web development. I'd have thought things have improved now because web and cloud are the first choices everywhere. But after seeing your post, I'm wondering if what I experienced is still the norm.