To make a longstanding impact, security leaders don't need to look further than the company's existing data analysts