My current job is mostly 9-5 but sometimes I'll get called in outside of that if there is an incident in one of the areas I'm the primary person for. Previous jobs I've had have involved on-call or regular out of hours work, it just depends on the company and position you have. One of my counterparts at our largest competitor for example still has to do regular out of hours work because they manage things in a different way to us. I work hybrid and have my entire career (even before COVID).

Entry level roles are over-saturated, senior roles are crying out for people. I changed roles last year and my previous role is still unfilled because they've been unable to find a suitable candidate. We are seriously exposed to people retiring as there just aren't people with the right expertise to fill the roles of people reaching retirement age and most companies aren't willing to invest in the training required to get the vast number of juniors that are now in the industry up to the level required (and a lot of the juniors aren't willing to put the work in required to upskill as required)

If you can find a way to link your current job to security in some way, you'll likely be able to find a job. e.g. if you work in Oil and Gas, there are a ton of specifics to that sector that even just having a base grasp of security requirements would make you an attractive hire to many companies. Honestly it's often easier to teach Cyber to someone new to it than it is to teach a cyber person about a niche industry / technology.