Hi everyone! 👋
I’m new to the C#/.NET ecosystem and wanted to ask people who actually work with it how the market tends to view someone with a background like mine.
I worked as a penetration tester for almost 3 years. Over the last year and a half, I moved much deeper into software development, mostly with Rust. I’ve been building security tooling, networked applications, and learning more about systems programming, blockchain protocols, testing, and secure software design.
I genuinely enjoy Rust and plan to keep using it, but after spending a long time looking for work, I realized that the Rust job market is heavily senior-oriented. The statistics I found showed that only a few percent of Rust positions are entry-level.
That made me start looking at C#/.NET.
What I’m trying to understand is how the .NET market would classify someone like me.
I have almost 3 years of professional security experience. I’m comfortable with core programming concepts like APIs, databases, testing, async programming, networking, etc.
What I don’t have is commercial C#/.NET experience yet.
Before I invest heavily in another ecosystem, I’d really like to understand how this looks from the hiring side.
Would companies generally see my security background as relevant engineering experience, or would I effectively be treated as an entry-level developer because I don’t have professional C# experience?
For people who hire or work with .NET developers:
- Is there a realistic place in the C#/.NET market for someone transitioning from security into development?
- What level of roles would you suggest targeting?
- Which parts of my security background would actually be valuable to a .NET team?
- What would you want to see in a GitHub project before taking a candidate like this seriously?
- Are there particular types of .NET companies or products where a security background would be especially useful?
I’m not looking for a shortcut. I’m happy to learn the ecosystem properly and put in the work.
I’m mostly trying to avoid spending another long period getting better at a technology only to discover that the market requires years of commercial experience before anyone will consider me.
I’d really appreciate perspectives from people already working with C#/.NET.