[wepple]

OP: you’ll find you got a lot of very vague, broad, range of answers. I think it might help if you try to find a subset of security that you’re interested in or would like to tackle.

It’s very hard these days to be a complete and effective generalist in security, let alone be good at a range of security stuff while also being great at data science.

I’d consider focusing on appsec for a year, get a job attacking or defending apps for a year, and then you’ll have a basic understanding of the problem space.