Do you have to know how to code well in order to secure code?

If you are able to be given code for a vulnerable web application, and be able to successfully spot out the vulnerabilities and even manually web pen test it (SQL injection, HTML injection, XSS, etc) but have trouble solving easy leetcode problems, how big of a problem is this?

application big code cybersecurity etc html html injection injection leetcode order pen pen test problems secure code sql sql injection test vulnerabilities vulnerable vulnerable web application web web application xss