Seeking Advice (Red-Teaming)

Hi everyone,

I'm a recent graduate who just started my first pentesting job, and my long-term goal has always been to work in red teaming, especially low-level work like malware development. I have some programming experience (mainly C and other languages.

I live in a country where red team positions are very limited. So far I have eJPT, eWAPTX, OSCP, and CRTP, and I'm taking CWES soon. My original plan was to go for CRTO next.

However, after talking to people in the field, many suggested that specializing in web or mobile security offers better career opportunities pay, and long-term growth even globally (since I might be moving) Some also said that red teaming isn't what most people imagine and that relatively few companies actually need dedicated red team operations.

For those who work (or have worked) in red teaming, do you think it's still worth pursuing, or would you recommend focusing on web/mobile security instead?

Thanks in advance for your advice!