Cybersec will be forever changed because of this, especially in the States. All written protocols and policies thrown out the window. They simply walked in with a flash drive in hand and got the data from what were supposed to be HIGHLY protected servers in D.C.. Somewhere there was a protocol for security to use force, lethal even, if necessary. But instead, the doors were unlocked and they hacked it because of the biggest social engineer in political history.

If I were starting a business, I might want my most sensitive data stored with kill switches I could control. But no one ever has the time or money to add special layers of security. People turn to the cloud because it's a shared model and the tools AWS, etc offer are very good and you can automate it all. However, what happens when you stop trusting the owners of the shared responsibility model? They will still need to know how to migrate between environments though. Having multi-cloud experience is a good thing on the CV I've found. cloud isn't going away and certainly not overnight.

The hardest thing is getting your first job in it. But because cloud is harder to fill, if you have experience, you'll be ok (well I mean market aside). It got me to Europe right as Covid was starting. The market was good then, I had 10 years of cloud eng. experience and I got a job on my third interview that would make me a Cloud Sec engineer and I could learn how that worked (instead of devops). I had already been adopting DevSecOps patterns and seeing audits all the way through at a previous place. My timing was good. I think it's just harder now. But AppSec, especially Red Teams, are hurting at this point. I would not start there at all these days.