How fast are security changes happening?

Question

Information Security

I know that the web, especially the front, is the hottest in terms of constant bondage, frameworks, packages, updates.
Server, a little easier.
Sis admins are the calmest pros.
But I wonder what kind of topics the security guards have?
How much do you have to study every day? How many hours do you spend besides work per week, month?
In theory, you need to know more than the front, serv and sys pros.

Answer 1

Well, you describe business security - some services that bring money to the company, yes, they can change constantly, there used to be one thing, now react and so on, and constantly new functionality, changes in requirements from the regulator arrive. And the security guard must know the architecture of the service, understand how authentication is arranged, the differentiation of rights, understand the code, and agree on improvements.
There is also corporate security, where everything is usually either static or develops slowly (we don’t take into account the leap in development due to the pandemic).
The most interesting thing in a software developer: new teams with a new set of products, methodologies, technologies. If there is outsourcing of services, then it is even more interesting, every time a new service appears that is provided to customers.

How much do you have to study every day?

There is barely enough time to read all the articles and news on information security and write an article on Habré.

How many hours do you spend besides work per week, month?

I do not spend, but what's the point?