748a1bb7-5034-4eff-b1df-4046a68c3ed0

Good question! Both, actually. Software engineers need to consider security from the get-go when writing code—this is called "secure coding practices." Things like input validation, encryption, and authentication should be baked into the code from the start.

On the flip side, there are also dedicated security engineers whose main job is to focus on the overall security architecture. They perform tasks like penetration testing, threat modeling, and auditing code for vulnerabilities.