Web app pentesting is hot right now. More on reddit.com

Pro: I’m in my mid 20s and make 6 figures Con: It’s stressful and exhausting a lot of days. Pro: I can do pretty much anything on a computer comfortably and troubleshoot most of not any issue. Con: I spend a large amount of time even when not working on my computer doing research and studying. Very time consuming. Pro: I work with highly intelligent people, much moreso than MOST people that work on the IT side. Con: Oftentimes when IT has issues, we end up being the ones able to troubleshoot the issue, they correct it. Pro: some days are very interesting and I feel as though I’m really making a difference and what im doing matters Con: some days it feels repetitive and exhausting. Overall, it’s a great career but highly stressful especially when working for a very large corporate entity. So much different technologies and legacy technology, always somewhere with limited visibility. I work on the blue team, specifically as an analyst/incident responder and support the threat hunting team as that’s where I’d like to end up in the future. At this stage in my life I’m ahead of most of my peers in their career just based off of passion and willingness to study outside of work. More on reddit.com

If you like cybersecurity, yes. I'd you're one of the many many people who were mislead into thinking they're going to land a 200k/y job doing fun redteam 1337 haxoring, then it never was. More on reddit.com

To repeat a lot of what’s already been said in this subreddit — the market is abyssal right now. There’s a major talent gap at the senior level — companies are struggling to find experienced engineers who can lead and secure increasingly complex systems. But at the entry level, the opposite problem exists: there are too many candidates, and not enough companies willing to take a chance on someone junior, train them up, and pay them what they’re worth. It’s brutal. A lot of CS grads and self-taught devs are either pivoting to other industries entirely, burning out after hundreds of ignored applications, or grinding certifications and lab work just to be told they need “3 years of experience for an entry-level role.” Even when they do land a job, many find the pay stagnant and the growth path unclear — especially compared to how things looked 5–10 years ago. Cybersecurity seems appealing because it's more nuanced, less affected (so far) by large language models replacing entry-level roles, and there’s still demand. But the hard truth is: cybersecurity has a massive barrier to entry as well. It’s not a guaranteed pivot. Many roles are being automated, outsourced, or require prior IT/sysadmin/cloud experience. And in cybersecurity, titles like “junior analyst” often still expect years of real-world experience. More on reddit.com