People actually good at offensive security (not just script kiddies) are paid much higher salaries than people on the defensive side. Defense isn't actually th

People actually good at offensive security (not just script kiddies) are paid much higher salaries than people on the defensive side. Defense isn't actually that difficult. 99% is keeping your software updated and configured correctly with industry standards. Most employees at larger companies are lazy and don't want to take the extra time to make something secure.