I have often joked that my job as a security engineer is to serve as a sort of technical debt collector. Technical debt is a term that is used to describe the accumulation of technical decisions that, in hindsight, are suboptimal. In some cases, you may know that you’re making a decision that will accumulate technical debt, but in most cases you won’t know that a decision has debt attached until considerably longer down the line.