Two jobs that are usually done by two people, done properly by one: keeping a portfolio of commercial applications running, and being the person who decides whether their design is safe. It is a senior post, and the security half is not decoration — you would own reference architectures, hardening baselines and the technical risk register entries that go with them. It suits an engineer who is credible in an architecture review and still willing to open a ticket queue afterwards. What you would …