well, there's a lot in sec that does not involve programming, but at one point you'll have to take programming into account, so you need to know what's going on
Like you can't really get into security, if you don't have the slightest idea about crypto imho
I don't mean like being crypto-nerd, but at least grasp the concept, know what to expect, how it works with a sufficient level of detail