Two controversial pieces of cybersecurity career advice I give to a lot of people I talk to on mentorship calls:

1) Don't become a manager unless you genuinely want to be a servant leader and devote yourself to people and program management for the joy and fulfillment of it.

2) Don't become a red teamer unless you genuinely in your heart of hearts want to be a red teamer, you understand what the role entails (even the boring parts), and you are willing to very deeply commit extra time and effort. They're generally much more competitive roles.

@hacks4pancakes Solid advice and definitely lots of people don't follow number 1. The amount of terrible managers I have had over the years makes it obvious they are in it for the money.

The one I give to junior people is, try lots of different roles and don't be afraid to jump ship to another company. So many people stick with the company even when it's clear they aren't going to get what they want from them. Usually because of some warped feeling of responsibility to the company.