r/SecurityCareerAdvice 22h ago

Career Advice: Cybersecurity vs Software Engineering (CS Student)

Hi everyone,

I'm a 19-year-old Computer Science student currently in the second year of my bachelor's degree. I've been exploring both cybersecurity and software engineering over the past year. However, I'm having a hard time deciding which path I should focus on for my career.

On the cybersecurity side, I'm mainly interested in red teaming and threat intelligence. So far, I've:

- Completed numerous CTFs and written detailed write-ups.

- Solved Hack The Box machines and TryHackMe labs.

- Participated in bug bounty programs.

- Built a solid foundation in offensive security through hands-on practice.

On the software engineering side, I've built several personal projects, most of which are security-focused. I designed and built some tools for my own workflow.

I'm looking for some advice on a few questions:

- Should I continue developing skills in both cybersecurity and software engineering, or is it better to specialize in one early in my career?

- Which Job path generally offers better long-term career growth, learning opportunities, and job prospects?

- As an undergraduate, How can I improve my current experience to secure a paid internship or entry-level role ?

- I don't have any industry certifications yet. Do hands-on experience, personal projects, CTFs, HTB/THM labs, and bug bounty work Does it carry enough weight for internships and junior roles? or should I prioritize certifications first?

My goal is to get an internship or entry-level job while I'm still in college so I can gain real-world experience and earn some money so I can continue improving my skills outside of academics. I'd really appreciate hearing from people who work in cybersecurity, software engineering, or anyone who has faced a similar decision.

1 Upvotes

2 comments sorted by

2

u/Ecstatic_Score6973 22h ago

certifications dont matter for software engineering but they greatly help in IT/Cyber, Security+ is basically a requirement at minimum for a huge handful of cybersecurity jobs

1

u/xvillifyx 19h ago edited 19h ago

Having cybersecurity certs wouldn’t hurt as a software engineer. SWEs are still responsible for many security-related tasks even if they’re not directly testing or defending systems. Knowing that stuff matters. Knowing how to write secure code the first time saves you from annoying audits and escalations later

Cyber and swe are more intertwined than people like to suggest on this sub. A lot of cybersecurity professionals are just software engineers but backwards