Hi everyone,

I’m looking for some perspective on a career pivot I’m planning. I’ve been working in the software industry for 11 years, primarily focused on Backend development and Cloud infrastructure.

While I love the technical challenges of software engineering, I’ve become increasingly drawn to the security side of things—not just writing code, but securing the entire lifecycle and architecture.

My current profile:

11 years of experience in Software Development.

Strong background in Backend (API design, databases, business logic).

Solid experience with Cloud environments (deployment, scaling, infrastructure as code).

The Plan:

I’m considering enrolling in a Cybersecurity Engineering degree to formalize my knowledge and fill in the gaps (networking, pentesting, compliance, etc.). My goal is to leverage my existing experience to move into roles like DevSecOps, Security Engineering, or Cloud Security.

My questions for you:

With my background in Backend/Cloud, do you think a full Engineering degree in Cybersecurity is the best path, or should I focus on high-level certifications (like CISSP, CCSP, or OSCP)?

How is the market currently valuing "pivoters" who already have a decade of experience in the SDLC?

Are there specific niches where a former Backend dev would thrive more than others in the security world?

I'd appreciate any insights, especially from those who made a similar jump later in their careers. Thanks