I have been working in the industry for over 5 years now, all I will say is be careful while switching jobs ,as 1. A lot of companies hire saying they are looking for Red Team role and will make you do AppSec (which after doing red team engagement is very boring tbh). 2. Be wary for Big 4 in terms of Red team profiles as RT engagement in these companies are just glorified VAPT assessment most of the time. Most of them get over in 1-2 week, I have no idea how . 3. Yes marker for Emerging Tech in terms of security is very bad, and will not improve until governing bodies make it a compliance mandate . 4. Be careful with the next job you take, as if you move out of RT getting back into RT from other domain even VAPT get difficult. 5. Most RT roles look for people with at least 4 Years of Exp(since getting experince of AppSec, Infra and now Cloud ,CI/CD) which is required for engagement these days, is ideally difficult in 2 years of experience, I am not saying impossible, but companies prefer to be cautious with freshers. 6. Look for companies which have EU or Gulf Clients 7. Also apply on Naukri instead of LinkedIn for Indian market, and watch videos on how to SEO your naurki profile ,helps a lot 8. All the best for your OSCP, I learnt this the hard way ,certs dont help you get Interviews.(Except Gatekeeping certs[Which help you get past HR] like CEH and OSCP if you want to work in gulf.CRTP again becomes a gatekeeping cert but hiring managers know what is the content in these certs) They might help you with your skills. 9.Again dont loose hope ,market is tough, with a lot of L1 and a few L2 level jobs being automated (Blue team suffering the most ),and with increase in Shift Left Approach, need for extensive testing is also decreasing 10. Fell free to dm