> Security minded generalist

there’s always some senior-ish person in the interview pool who is interested in security. hire them, let them figure things out and then give them permission to call bullshit on what you’ve done so far.

avoid hiring the “fanatics” tho. you don’t need E2EE everywhere.