“Please RT for reach. Should security testing also be done with typical software QA testing? If so, by who? Feel free to clarify your answer in replies.”