Good at finding/fixing security vulnerabilities = Good at finding/exploiting security vulnerabilities.