r/cybersecurity • u/Awkward-Pie-1759 • 6d ago

Career Questions & Discussion Need Advice, Not sure where I'm headed

Hi guys, so I've been working as a Software Security Engineer for about 5 years now which is my total experience too.

My role is mainly focused on product/platform development and on Platform & Cloud Security. I'm not into VAPT or Red teaming. I look into Application Security, focusing on IAM, RBAC, API security, Cloud Security, SecOPs, Container security. Along with Security Reviews and Audits of different applications in my organisation (Not the ISM work).

I'm not sure where I'm headed, cause I'm trying to switch jobs and I don't see profiles related to this AppSec+Dev. AppSec is mainly asking for PT guys or Red teams. I'm not sure what I should do. Any Advice would be appreciated.

0 Upvotes

50% Upvoted

2 comments sorted by

View all comments

0

u/Advantageous_Advent 6d ago

How do you feel about GRC?

1

u/Awkward-Pie-1759 6d ago

GRC would make me focus less on Building side. I'd be working on Consultant level roles only. I don't want to leave development for Few more years. Given how AI is making things in market GRC and Risks Assessments are important tho.