I want to move into AppSec. I’ve been in IT for 12 years, 10 of those in Networking (CCIE), and now two in IT Security (DFIR, Logging, WAF). I have some basic coding skills (Python and Bash Shell), and a two year degree in EE. I’m confused about where to start. There isn’t a blanket certification or a framework I can build knowledge off of. I’m pretty familiar with the OWASP CRS Top 10 from WAFs, but I’m looking for ideas or projects to start building knowledge. I was thinking about starting with freecodecamp or the Odinproject. Or should I go back to school and get a full-fledged CompSci degree? I always struggled with Calculus, and that always discouraged me from CompSci.
Any experience or knowledge is welcomed. Thank you for your advice.