umm what? don’t confuse his organizational role with what he did within the organization. he was brought in as a security expert, he frequently reported security vulnerabilities in NSA software, and he turned down a position in tailored access operations (the group that actually performs attacks and compromises systems).
source: