These are just as tedious as web programming. SRE even worse. Security might have a few research roles if you’re really lucky but most are boring jobs where you nag people to do things they don’t care about
I'd put those in the bin with "Stuff that just goes on around what programs do but doesn't actually relate to what they do".