ITSec14 wrote: » How approachable is your manager? Sometimes just flat out having that conversation can be a good thing. You don't want to have multiple roles and only be okay at them. Ideally, you will want to focus on your area of interest and master it. I like vulnerability management and want to learn more about pentesting, but I also write security policies too (among other things). Do I want to continue to be relied on to write policies? Heck no! If your company knows they can have someone dedicated to a particular area, I would consider that a win for both the company and the individual.