It's also chronically understaffed.

That might be true. But the answer isn’t hiring someone with no real world experience. I would hire an entry level developer before I would hire an entry level security person.

	▲	browningstreet a year ago \| parent [-]
		I didn’t mean “understaffed and they need more people and so that’s a great move on OPs part”. I meant “they’ll never hire as many security people as they should have on staff and OP would be wading into low-demand territory”.