[powerhour]

I haven't experienced anything this bad. I've seen security lapses and have been able to fix them on my own or with a team, and I don't remember ever getting pushback.

It's probably time to start interviewing. Ideally before your employer's security woes become headline news. (Of course, if you've only been there a few months you can easily leave them off your resume once word of the flaws gets out.)