DevSecOps role expansion has changed how companies address their security posture