https://leaddev.com/technical-direction/handling-security-issues-engineering-team