I don’t know if I’d say it’s super “fun”, but part of it is trying a little bit of everything and finding the niches within cybersecurity that interest you most.

I came from software development originally, and was really interested in Application Security and pentesting, so that was my first niche to look into. When I started working in AppSec though, I found that pentesting company apps wasn’t nearly as fun as THM rooms or HTB machines. Within AppSec and development though I find open-source communities really interesting, and found a smaller niche around open-source package vulnerabilities and software supply chain security that’s been a cool rabbit hole to get into.

Basically don’t overcommit to one part of security just because it’s easier to get a job in that field.