Hello everyone,

I am currently starting my journey in Cybersecurity and I am at a crossroads regarding which specialization to focus on first.

My Situation: I have a genuine passion for low-level topics (Assembly, Memory Management, Reverse Engineering). I find the pwn.college curriculum and Binary Exploitation (Pwn) challenges fascinating and intellectually rewarding. I am willing to put in the hard work and study the heavy technical materials required for this path.

The Dilemma: While I enjoy Pwn more, I often hear that the market for Junior Vulnerability Researchers or Exploit Developers is extremely small compared to Web Application Security.

My Questions to the Industry Professionals:

1. Market Reality: Is it realistic for a beginner to aim directly for a Pwn/RE role as a first job? Or are these roles typically reserved for seniors with years of experience?

2. Career Strategy: Would it be wiser to start with Web Security to get my foot in the door and secure a job, and then transition to Pwn later?

3. Opportunity Volume: How does the volume of opportunities (Job openings / Bug Bounty programs) compare between the two fields for someone just starting out?

I want to make sure I am investing my time efficiently. Any insights or personal experiences would be greatly appreciated.

Thank you.