How do a security guy work. Barry Dorrans knows that very well.
Barry is the security czar for ASP.NET which means he gets to look at the framework, tools and template code, searching for potential insecurities and sometimes even fixing them. He also triages publically and privately reported vulnerabilities before getting someone else to fix them which means he gets all of the fun and none of the responsibility. He is rude and objectionable on twitter as @blowdart. (from the introduction of his presentation at leetspeak last year.)