"Cyber defense is often the opposite of a creative activity."
Security can also be about identifying and mitigating risks to make a formerly unprofitable certain loss into a viable business opportunity. Big picture example: how many US banks would have offices in China or Russia right now without the help of security professionals? It's not all about bopping people on the head.