I’m starting my career in cyber security in the public sector because I have a top secret and I’m able to get into positions I wouldn’t otherwise qualify for. I’m learning so much and the pay is pretty good. Eventually I’d want to switch into the private sector (haven’t decided if I want to stay technical or go management yet, both interest me equally) I continue learning and dedicate a lot of my free time to certifications, classes, home labs, and research.

When would be a good time to make the switch early, mid, or late career? If I get a upper management cyber security defense contractor position such as ISSM would that transition nicely to CISO type role? Would private companies see value in my government work if I decided to get into consulting?