But it’s annoying to program. You need the same records as an undo/redo system, except they’re only applied after approval. Finance does it because everyone knows finance is boring already, but I’m not sure it would be possible to retain a JS programmer in another sector if the 6-eye principle had to be applied for every modification. It’s already hard to motivate them for i18n…
Maybe stop hiring 19 year olds who just did a "become a Web developer in 6 weeks" bootcamp to code your core security features then. Pay peanuts, get monkeys.
It’s in France, it’s just for Java + React not rocket science.
Claiming $120k is a shit salary is really entitled, it’s among the top 20% of engineers in France and top 7% of an entire country. For Java and React. Glad I don’t have him among my employees.
Your security staff have access to literally everything in your company, visibility into all communication and trust with physical devices. If they're not the highest paid of your engineering staff you screwed up. Glad I don't have the misery of being your employee.
This is one of the biggest issues people don't realize. A react dev doing fully frontend stuff is usually paid more than a security guy. Management views this as the developer making a product and giving money. But with insurance no longer covering hacks like they used to, and with the absolute amount of ways into organizations, security people can literally save a company from millions of losses and possible collapse.