I don't know what "security expert" means, but I do believe that you can't secure software if you can't code, and I do believe most real-world security jobs require you to secure software.