I think a game developer might end up being great at some kinds of security stuff because you already are used to thinking with a defensive programming mindset.

If you were building popular multi-player games for instance, you were probably thinking a lot about systems to prevent players from cheating or finding exploits to win. A lot of common web-development is much the same thing.