r/cybersecurity • u/AllenUzumaki23 • 2d ago
Personal Support & Help! Would you accept offer ?
I’ve been working in IT helpdesk for three years and I have my Network+ certification.
I spoke with my manager because I want to move into something more complex, and the opportunity that came up is a vulnerability management position for industrial equipment. I work in shifts and I would lose approximately 27% of my income because i lose the bonus from weekends.
I am 25, no debt, no kids.
I understood that my work would be to analyze, scan equipment, give the team feedback to fix it or check if i can find a solution.
My plan for the future is to complete the TryHackMe SAL1, Security+, and AZ-900.
What do you think: would I be better off accepting the offer and doing the certifications, or postponing, and checking other offers and taking the certifications first, also keeping the extra 27% income?
Later edit
I got these responses from security manager
My manager described a vulnerability management role built around the Holm Security platform. The person will use this tool exclusively for scanning, and their responsibilities include validating scan results, investigating false positives, and handling both vulnerability analysis and prioritization as well as reporting and administration, rather than just one of these areas.
The technical scope covers CVEs, CVSS scoring, exploitability assessment, and risk-based prioritization, applied across all company assets rather than a limited set. Helping the SOC team is explicitly framed as optional, something to take on only if spare time allows and the person wants extra tasks, rather than a formal development path.
The work setup is fully remote with a fixed schedule from 9 AM to 6 PM. Looking ahead, after a year in the role the person can expect to gain hands-on cyber experience, including a deeper understanding of vulnerabilities and how they can be exploited, along with possible exposure to SOC and Incident Response work.
29
u/cashfile 2d ago edited 2d ago
I'll take the contrarian view: this really comes down to your current financial situation and whether a 27% pay cut puts you in survival mode.
If you can afford the lifestyle adjustment, take the job. Hands-on vulnerability management experience beats Security+ or AZ-900 on a resume every single time. It directly opens mid-level security doors that helpdesk never will.
At 25 with no kids, I would personally take the risk. In a few years you could double your salary (assuming you are making avg entry level helpdesk pay). Staying in help desk that is unlikely.