Unfortunately our industry has become the go to for job changers and those looking to improve their lot in life quickly. Lost your job at the mill....just learn to program. Can't pass Calc 1, just get your CCNA and become a Sysadmin. Tired of working retail, go to boot camp and in 6 weeks you can be a Cyber Security professional. It's no wonder our wages have receded in the last decade.
Security was never where you started in IT, it's where you ended up. Most people in security have had lengthy careers in different areas of IT like programming or networking before they got into security because security requires a large depth and breath of knowledge to be good at the job. As far as future, who knows, in 10 years we could all be digging in a mine with spoons working for our AI overlords, but my guess is it's not going anywhere.
I wanted to get into security, but as a Senior Software Engineer I earn twice as much as I would get as a Junior Security Engineer. Anywhere I tried, they don’t hire into senior positions if you dont have relevant security experience (understandably)
And based on my experience certifications are not enough
good or bad being a software engineer now is top of the heap as far as pay so you can't expect the same amount of money. I was lucky to be able to do a lateral move within my company so no pay cut (actually a small increase). Your best bet in my opinion is to get involved in the community and get a job by referral -it's just easier and you can ask for more money.
Now add in the hellishly complex cloud environments and k8s, terraform and the like.
"cyber security analyst" - no