We could go the engineering route which originally was result oriented - The code of Hammurabi says if an engineer build a house and it should fall down and kill the son of the owner, the builder's son shall be put to death.
Security can live or die on the tolerance to correctness.
If you were certified, you got to argue your client's side of things. If we have a model today, it probably is the apprenticeship model from the middle ages. Work for good people, learn all you can, experiment, and let your product be the metric for how good you are. Be careful what you pray for. You just might get it.