Most of the impressive computer security subdisciplines have very tight feedback loops and extreme legibility; that’s what makes them impressive. When I think of the hardest security jobs, I think of 0-day writers, red-teamers, etc., who might have whatever Eliezer describes as security mindset but are also described extremely well by him in #40. There are people that do a really good job of protecting large companies, but they’re rare, and their accomplishments are highly illegible except to a select group of guys at e.g. SpecterOps. I don’t think MIRI would be able to pick them out, which is of course not their fault.
I’d say something more like hedge fund management, but unfortunately those guys tend to be paid pretty well...
Most of the impressive computer security subdisciplines have very tight feedback loops and extreme legibility; that’s what makes them impressive. When I think of the hardest security jobs, I think of 0-day writers, red-teamers, etc., who might have whatever Eliezer describes as security mindset but are also described extremely well by him in #40. There are people that do a really good job of protecting large companies, but they’re rare, and their accomplishments are highly illegible except to a select group of guys at e.g. SpecterOps. I don’t think MIRI would be able to pick them out, which is of course not their fault.
I’d say something more like hedge fund management, but unfortunately those guys tend to be paid pretty well...