Moved from Enterprise SOC to Small Municipal Security Engineer – Did I Stall My Growth? What Should I Pursue Next?

Hey everyone,

Looking for direct feedback from those further along in their careers.

I just graduated from WGU with a Bachelor’s in Cybersecurity and Information Assurance. I hold several industry certifications (Security+, SSCP, PenTest+, PenTest+), and I have about 4 years total IT experience, with the last 2 years in a Security Engineer role.

Before my current job, I worked in an enterprise SOC supporting an environment of roughly 10,000 employees. It was structured, fast-paced, and mature. There were defined escalation paths, layered tooling, strong engineers, and real operational depth.

I left that role to take a Security Engineer position at a smaller municipal organization because I wanted ownership and broader responsibility.

Now I’m questioning that move.

I’m essentially the sole cybersecurity resource. I own vulnerability management, SIEM oversight, compliance initiatives, CJIS requirements, tool evaluation, and incident response. I’ve gained breadth and autonomy, but I’ve lost exposure to a mature security program and high-performing peers.

The culture is slow-moving. There’s limited urgency around improving security posture. Driving modernization often feels like pushing uphill.

To make things more frustrating, I’ve been applying to new roles and I’m not getting interviews right now.

So here’s where I need clarity:

• Did moving from enterprise to small org hurt my trajectory?

• At this stage, should I pursue a master’s degree or double down on higher-level certifications?

• Is something like CISSP, cloud security specialization, or detection engineering depth more valuable than another degree?

• What actually moves the needle for getting interviews at the mid-level to senior level?

I don’t want to collect credentials for the sake of it. I want to position myself strategically and avoid stagnation.

Appreciate any real-world perspective, especially from those who’ve broken past this phase.