This question already has an answer here:
I am currently working as a Software/Web Developer with around eight years experience, however I have always had an interest in IT Security and am now hoping to move my career in this direction.
I was wondering what areas of IT Security might make for a natural progression from software/web development and what certifications might apply? Or if a 'natural progression' even matters if I find another area to be of greater interest. E.g. I find penetration testing really interesting but I'm not sure if my existing skills would be any use here.
Also, I'm wondering if its too late in the game to make a switch like this and maybe I should have done it earlier? (I'm in my early 30s) If I decide it is too late, it is still my intention to up-skill in this area because it will most likely help my software/web development anyway (its also interesting and something I want to do anyway!).
I'm quite excited about the idea of taking my knowledge of security to a greater level, learning new skills and gaining some certifications etc, but I want to try and set a clear direction for myself first so I don't just wander aimlessly.
Thanks in advance!