I am a security consultant and I have been working in cybersecurity (GRC) for almost 6 years now but I dont feel like my career is moving or that I am learning new subjects in my job. I dont want to climb in the consulting hierarchy (to a management position) but I dont seem to be hireable as a security engineer.
I applied to at least 20 position in the past 2 years (security engineer, application security specialist, security architect, entry evel and mid senior positions) but I have never got an offer. I studied DevOps and DevSecOps, implemented SIEM solutions and got different certifications in the cloud and devops tools and during interviews I respond correctly to all technical questions. However, they always decide to “move forward with a different candidate” or that I am not “the best suited to this position”.
Please I need advice ! What am I doing wrong ? What are they looking for ? I feel desperate.