I get the feeling these kind of skills are very rare because they fall in the category "understanding and debugging other people code/mess", while most people prefer to build new things (and often struggle to debug their own work).

It takes a lot a passion and dedication to security and reverse engineering to get there.