I am a security professional. My work directly affects the security of the systems I am responsible for. If I do my job well, people’s data is less likely to be stolen, leaked, intentionally corrupted, or held for ransom. I also influence privacy related decisions.
I work for a Mag7 company. The company has many divisions; the division I work for doesn’t seem to be doing anything that I would perceive as unethical, but other divisions of my company do behave in a way I consider unethical.
I’m not afraid to take an ethical stance; in a previous job at another company I have directly confronted my management chain about questionable behavior and threatened to quit (I ended up convincing them my position was correct).
So how do I reason about that? Really the sticking point is that large companies are not monoliths. Am I acting unethically for working for an ethical division of an imperfect company?