Find complements to what you do now that are security related and move from there. If you do devops and SRE, you’re a practitioner in security.
To the right organization, someone with your operational and Dev background is super useful. Many security orgs came from a policy background and have challenges because they lack experienced operations or dev focused people.
Make sure that you understand what you want to do. Map your experience to the appropriate security lingo. Understand the core concepts in NIST 800-53
A lot of the material you’ll find on the web about the industry is consulting focused.
To the right organization, someone with your operational and Dev background is super useful. Many security orgs came from a policy background and have challenges because they lack experienced operations or dev focused people.
Make sure that you understand what you want to do. Map your experience to the appropriate security lingo. Understand the core concepts in NIST 800-53
A lot of the material you’ll find on the web about the industry is consulting focused.