P.S. probably my primary goal with writing my book was to address both 1 & 2 above ^
reveal to platform engineers & SREs how very capable they already are to solve cybersecurity challenges
and to teach cyberpros how software works, a crash course in software delivery practices, all the opportunities they overlook while drooling over the RSAC vendor hall, etc.
shameless plug: https://securitychaoseng.com/