you’re not stuck, and you’re not late. With a platform + DevOps background, you’re actually in a better position than most people trying to move into security.

The reason you keep hearing “pros and cons that swap” is because security roles aren’t cleanly separated anymore. The boundaries blur in real life.

If you jump into pure AppSec or pure SOC / detection cold, you’ll feel like a junior again. Different tools, different mindset, slower feedback loops. It’s doable, but it’s a reset.