Breaking shit is important, so is understanding how to fix them, unless you'll work solely with penetration test. I tell you this because many hiring process for sec engs are around CTF games. From my experience as a security engineer, it's tough to find vulnerabilities, but it's as hard to fix them. Few security guys know how to code to the point of talking to developers or knowing devops to talk to system administrators. Btw, that's I'll write a blog post about this later.