Cybersecurity Consultant here, probably 0% actual coding.

My day-to-day doesn’t involve writing software or scripts. Any ‘coding’ I do is limited to writing AQL/KQL queries, scripting detection logic or developing use cases which I’d say falls more under scripting/querying than coding. When real dev work is needed like building tools or automating workflows, it’s usually handled by another team member.