Security is actually the specific risk-mitigation regime I've been moving into, and that's part of why I'm not too worried about it as a career move. It seems to be able to pay well, which suggests that the corporate world does have some understanding that it is a necessity and not just a cost center. But only some.