Also why not both? Depending on the size of the company they might be happy to provide you with opportunities in the infosec space that start small and can grow into something cool. I have a software engineering background as well and 3 years ago I decided to learn about data science and machine learning (actually I’m mostly here to gather domain knowledge on cybersecurity and transition my ML skills onto that domain, but that’s a different story…). I ended up doing 2 courses, 1 online, 1 in-person bootcamp to get my feet wet, and talked to my boss about my interest. These days I’m in a 50/50% technical architect / hands-on data scientist role building data pipelines and models, with absolutely no paycut. #geeklifeisbestlife