[ferennag]

How do you get into security from other parts of IT without downleveling and having a huge pay cut?

I wanted to get into security, but as a Senior Software Engineer I earn twice as much as I would get as a Junior Security Engineer. Anywhere I tried, they don’t hire into senior positions if you dont have relevant security experience (understandably)

And based on my experience certifications are not enough

[screwturner68]

I've been a part the security/hacking community for years so some people know me or know me by reputation. I actually wasn't looking for a career change but we had a product that straddled both my area and security so I stepped up and became the SME on that product. Over the course of about 2 years more and more of my concentration went from DC work to security work to where I am now where I'd guess I'm 80% security focus and 20% Data center/disaster recovery -but again DC/DR is security.

good or bad being a software engineer now is top of the heap as far as pay so you can't expect the same amount of money. I was lucky to be able to do a lateral move within my company so no pay cut (actually a small increase). Your best bet in my opinion is to get involved in the community and get a job by referral -it's just easier and you can ask for more money.