Security Engineer

If a security analyst watches for fires, a security engineer builds the systems that make fires harder to start. The work is architectural: designing Zero Trust networks, hardening CI/CD pipelines against supply chain attacks, choosing cryptographic primitives that won't be regretted in five years.

You hold an adversarial mindset in one hand and an empathy for developer workflow in the other, because controls that engineers route around aren't really controls. Frameworks like OWASP and the MITRE ATT&CK catalog give you a shared language with the rest of the field.

Students drawn to this path usually liked the puzzles in a CTF more than the prizes. Growth comes from owning a real production environment and writing the post-mortem when something you missed went wrong.