Strong enough technically to review architectures, evaluate cryptographic choices, assess OS hardening, and have credible design-level conversations with embedded and software engineers without needing to implement each one yourself. You need to understand how attacks work against embedded systems, networked robots, and C2 architectures, but your primary output is requirements, threat models, verification plans, and compliance artifacts, not production code.