Accountability is the moat
Most of what a security team produces is now cheap to make. A findings report, a threat model, a first-pass code review, a passable exploit for a known bug: a competent model does all of it in minutes, at a quality that would have taken a junior a week two years ago. If your job is to produce that work, the floor just fell out from under the price of it.
People keep asking what that does to security careers. The framing is wrong. The work was never the scarce thing. The scarce thing was someone who would put their name on it.
Cheap work makes judgment expensive
When producing an artifact costs almost nothing, the artifact stops being the product. Anyone can generate ten threat models. The value is in knowing which one is right, which risk actually matters for this business this quarter, and being willing to say so to a board in a way that carries consequences if you are wrong.
That is accountability, and it does not automate. A model can draft the memo. It cannot be the person who stakes their reputation on the memo being correct. It cannot be fired for getting it wrong. It cannot sit across from a CEO and say "connect this company on day one" and own what happens next.
The cheaper the work gets, the more valuable it is to be the one who says: I checked this, and it is right.
What this means if you lead security
Stop selling hours. Hours are the thing AI just made worthless. Sell judgment and ownership. The market will still pay, and pay more, for a person who absorbs risk on someone else's behalf and is credible when they do it.
Use the cheap work. Cover more ground than you ever could by hand. Run the scans, generate the drafts, let the model do the first ninety percent. Then spend your scarce attention on the last ten, the part that requires a human who is accountable to say this is done and this is true.
And make your accountability legible. If the work is cheap and the judgment is the product, you have to be able to show your judgment: what you checked, what you decided, why, and what you would stake on it. A pile of AI-generated findings with no one behind them is worth nothing. The same pile, with a name on it and the reasoning shown, is worth what security has always been worth.
The tools on this site are built on that premise. They do the cheap work fast so you can spend your time being the person who is accountable for the answer. That is the part that was always the job.