What are my options for a career switch into IT Security?

Question

I am currently working as a Software/Web Developer with around eight years experience, however I have always had an interest in IT Security and am now hoping to move my career in this direction. I was wondering what areas of IT Security might make for a natural progression from software/web development and what certifications might apply? Or if a 'natural progression' even matters if I find another area to be of greater interest. E.g. I find penetration testing really interesting but I'm not sure if my existing skills would be any use here. Also, I'm wondering if its too late in the game to make a switch like this and maybe I should have done it earlier? (I'm in my early 30s) If I decide it is too late, it is still my intention to up-skill in this area because it will most likely help my software/web development anyway (its also interesting and something I want to do anyway!). I'm quite excited about the idea of taking my knowledge of security to a greater level, learning new skills and gaining some certifications etc, but I want to try and set a clear direction for myself first so I don't just wander aimlessly. Thanks in advance!

Answer 1

In general, I'm a big believer that professionals who are determined and focused can transition from almost any industry into another industry. It does take time, effort and persistence, and in many cases, there are costs associated with making this career transition.

In this specific case, I think it's possible to transition from a software/web developer into IT security. After all, they are both still technology related roles.

Here are a few things to work on in your career transition planning:

1. Courses: What courses do you need to take in IT security to provide you with the technical level of expertise you need?
2. Certification: What certifications are there in the IT security field that you can achieve to demonstrate your capabilities?
3. Side Hustle: Can you start your own side hustle or side gig as an IT security consultant? Offer your first few clients lower than normal hourly rates to get your foot in the door.
4. Building credibility: Can you write blog post articles on your website, host a podcast about IT security, post some YouTube videos about IT security? This could help you build your credibility in your new field.
5. Networking: Are there IT security industry events (either in person or virtual) that you can attend and start to build your network in the new industry you want to get into?
6. Informational Interviews: Reach out to contact already in the IT security industry to set up informational interviews, so you can ask more detailed questions about how to get into that industry.
7. Update your resume and start applying for roles: When you've completed the steps above, you should be ready to start applying for job in the IT security industry.

For anyone interested in making a career transition, I highly recommend a book written by a former Google colleague, Jenny Blake, called: "Pivot: The Only Move That Matters Is Your Next One".

Good luck with your career transition!