Running Your Security Team Like a Startup