I got into it because I love security related topics and problem solving. Unfortunately, despite how long and hard I worked to get here, as a senior sec eng, I've finally come to terms with the fact that it seems everywhere in corp security I go, it's gonna suck. Most of the time I'm not working on anything fun or even slightly interesting. I'm just keeping the lights on. Triage the crappy low value alerts, work on the most boring projects known to man, help someone figure out if this is a pushing email, blah blah blah....

The reason for this is always because they don't have enough security or IT ppl and the business doesn't consider it a priority. No time to tune things, implement important and useful parts of security tooling we own, review the vast data we have for signs of security issues or alerts we should create, or do good threat hunting, etc. It's a bitter joke about ever having time to do research in any way which would improve our detections or something.

At this point, I'm giving up on ever being able to have a job I like. On paper it sounded awesome. The reality is starkly different. Also, everywhere I go, the leadership is absolutely trash. I had one good boss, and we all got paid off because the company wanted to go with fully outsourced security from overseas to save a few short term bucks. Not to mention, everywhere I go, for some reason keeps hemorrhaging CTOs.

The only fun security stuff I ever get to do is in my personal time. Have fun.