Some managers are unable to assess employees efficiency, so they measure working time and are only happy when everyone is working 70 + hours per week. They also

Some managers are unable to assess employees efficiency, so they measure working time and are only happy when everyone is working 70 + hours per week. They also measure commitment by how hard you laugh at their jokes. Even though it is infinitely more precious to have someone productive working around 40 hrs a week (i.e. with around 30 extra potential hours to work when there is a rush) who finds critical software vulnerabilities like you did. Their loss.