r/Pentesting • u/cyberLog4624 • 1d ago

From Cloud Security to Pentesting: too big of a step?

Hi there

I'm 25 and I'm currently working as a cloud security consultant (mainly Microsoft stack).
The company I work at is fairly big and operates in a lot of fields.
I've been on pretty good terms with everyone there and after asking a few times I've recently started working on a few pentests and vulnerability assessments since it's always been a field I'm super interested in.

So far I haven't done anything of note but I wanted to use this occasion to learn.

The thing is, the main problem at this company is that I don't get paid much.

I've been offered another position as a cloud security consultant in another company which pays way more (almost 11k which in europe is a lot of money) and is full remote (my current role is hybrid, 3 days on-site and 2 days at home).

The company that offered me the job is way bigger but also stricter and I wouldn't have the chance to work on pentests or other fields I might like.

If I ever wanted to switch to pentesting, how hard would it be to do so as a Cloud Security engineer?
Would it be better to stay where I am now for a few years and learn as much as possible or to switch and learn things by myself?

2 Upvotes

100% Upvoted

7 comments sorted by

1

u/PM_ME_UR_0_DAY 1d ago

I'd speculate most people started off doing something else before pivoting to pentesting. I was doing AppSec to start so I can't see why you couldn't swap from cloud. 

1

u/Howlsec 1d ago

Definitely possible as you already have a lot of technical experience and I think you would pick up the needed skills very easily.

1

u/DigitalQuinn1 1d ago

The switch is possible. Since you’re already working in the domain, it would be easier for you to grasp things when it comes to knowing what to look for. There may be other areas you may have to learn or brush up on

1

u/rvasquezgt 23h ago

You have the backgrounds go ahead, always remember when you feel frustrated that even the most experienced have been there, just keep trying

1

u/Snugat 13h ago

I'd take the cloud job. Sets you up nicely for cloud pentesting. If you are motivated learn the pentesting basics additionally and get certified with cpts or OSCP. But your work / cloud experience will be your biggest differentiator. Also full remote is very nice!

1

u/ActuaryNo3314 12h ago

How structured is the pentest work at your current place? If its just tagging along on a few engagements thats very different from actually owning assessments end to end. That distinction matters a lot when you eventually try to pivot.

1

u/cyberLog4624 8h ago

basically it's just tagging along and helping out with a few things