I wouldn't pivot to security completely, it honestly seems like that field has been boiled down to moving data from automated security jobs into Jira and chasing down engineers to fix dependabot issues.
As a developer you should of course study security concepts and understand how to avoid creating exploits in what you are working on, but being a dev who understands a good amount about security is always going to be more useful to a company IMO
As a developer you should of course study security concepts and understand how to avoid creating exploits in what you are working on, but being a dev who understands a good amount about security is always going to be more useful to a company IMO