u/LeatherCreepy8156

I recently left an incident response role after several years to join a cybersecurity vendor in a customer-facing position. (For a well known fortune 100 company) - loved the job but stress caught up and opportunities for internal moves became scarce.

The new role is still technical and security-focused, but instead of responding to incidents internally, I’m helping customers understand security events, detections, and the platform. The pay and work-life balance are significantly better, which was a big factor in the move.

I currently hold CISSP, GCIH, and BTL1.

My concern is whether spending a few years in a role like this could make it harder to move back into an internal security role (IR, security operations, detection engineering, security engineering, etc.). This new role feels much more adjacent to customer success with some technical stuff.

Has anyone made a similar move and later returned to an internal security team? Did recruiters or hiring managers view your vendor experience as a positive, neutral, or negative?

I’d appreciate hearing from anyone who’s been through something similar.