These are just as tedious as web programming. SRE even worse. Security might have a few research roles if you’re really lucky but most are boring jobs where you nag people to do things they don’t care about