I want to transition into cybersecurity from Salesforce - am I being unrealistic?
I have a degree in computer science. I have been working as a Salesforce dev for 7 years and an integration architect now for a year, giving me a total of 8 years experience. I have many certs in the Salesforce world (their usefulness is up for debate...). The thing is I really don't like working in this domain. I hate Salesforce as a company and I'm sick of working with the product. I don't have very high job satisfaction especially since I am having to pivot to more of an architect role now that Claude is somewhat capable at the day-to-day dev and it's not something I really enjoy.
I have always had an interest in cyber security - in 2016 I got a post grad cert from the Open University (UK/Ireland will be familiar with it) in information security purely out of interest. In the evenings I spend time doing CTFs and this year I started on TryHackMe. I plan to get CompTIA Security+ this year as well.
I have always wanted a more meaningful job and I would like to work in cybersecurity in the public sector in my country (Ireland). They have just had a recruitment drive and the next, final one will be around May 2028. So I have until then to prepare.
The candidate booklet for the position I am targeting (Cyber Security Specialist (Operations)) listed the following for the position this year:
- Level 7 or above in a relevant discipline (I have this) OR 5 years cyber experience
- A comprehensive knowledge of developments in ICT security including but not limited to Cyber including Security Incident response, Cyber threat intelligence (CTI), Digital Forensics, Network, Investigations, malware analysis and open source intelligence (OSINT);
- A proven ability to troubleshoot technical issues and mitigate risks at a senior level;
- A proven track record of achieving results and an ability to work with a wide range of
- stakeholders to deliver common objectives;
- The ability to lead, manage and develop a team;
- Excellent oral and written communication skills, including the ability to write technical reports and present information in clear and concise language to both technical and non-technical stakeholders;
- Excellent interpersonal skills with a proven capacity to effectively engage, collaborate and foster positive working relationships with both colleagues and external stakeholders;
- A demonstrated commitment to Continuous Professional Development (CPD) and Innovation.
Desirable is the following:
- Recognised relevant certifications from international bodies including, but not limited to ISACA, GIAC, SANS, CREST and ISC2;
- Project management experience;
- An in-depth understanding of ICT systems with particular reference to cyber threats;
- Understanding or the ability to quickly gain an understanding of the current global cyber environment and its challenges for Ireland (e.g. security strategy and governance, application security, cloud security, identity and access management, cyber defence);
I can see some of the softer skills being things I have acquired throughout my Salesforce career, particularly around communication, leadership etc. I also have good knowledge of security from an integration perspective although I see this as being a small thing that sets me apart, not enough to significantly increase my chances of success.
My plan is to target a position like this in 2028 and structure my cyber learning until then around this.
Am I being realistic in doing this given my experience to date in IT? Or should I ideally have some specific cyber-related industry experience?
Do you have any advice on how I can best apply myself for the next 2 years to give myself a realistic chance of getting a role like this.