Giuliani's firm is involved in cybersecurity primarily on the crisis management/internal investigation/liability side of things. Not "how do you harden your servers," but "how do you prepare your organization for when you get hacked," and "when you do get hacked, how do you respond?" Which is how most large organizations view "cybersecurity."

It should be noted that Secretaries of Defense often are not soldiers (the current one isn't).