I recently moved into an offensive job after a few years doing secops and cloud security. I think his point about having a genuine interest in security and its offensive applications is really important. Self-learning never really felt like work or a chore because I really found it interesting.

I’m also going to plug my favorite resource: Pentesterlab. I get nothing from this, I just think it’s a great product. It’s been my most used resource since I decided I wanted to be a pentester. I think I’ve seen Louis post here before, so if you read this, thanks for making a great site.