Building a culture where your best security people choose your organization is key.