of course there is tension. (Score 4, Insightful)

And the tension starts well before the software is written. If you can't ssh to your cloud instance because "security", if you can't run anything past ie6 because "security", if you can't download libraries, or basic tools because "security" - your devs are going to dismiss your security team so VERY VERY quickly. First of all, things have to work, you can have perfect security, but no one will get anything done.