I’m a mid level security architect (governance, risk, compliance) and I’m a below average developer, coming from DevOps/infrastructure before. In my security roles, no development or software engineering skills are required.

I might work on improving eventually, it's just not a priority. Any upward trajectory now is going to be from experience and soft skills.