Programming, application security, and DevSecOps. These roles live where code becomes attack surface. They review pull requests, instrument pipelines, write tools that other security teams use, and reverse-engineer the malware that everyone else just scans for. If you like building as much as you like breaking, this is your house.