I had a lot of the same duties at my last job, just wanted to be more involved with the overall defense of the network but am really starting to miss the development of scripts and queries I used to do everyday, rather than monitoring alerts in console and responding to incidents. Every now and then managing logs and doing deep forensic analysis can be fun, but rare. It is possible I will just go back to doing what I was doing, maybe for a security company or something would be ideal.

So my job title is DBA, but i'm not in the traditional role of managing the server or doing backups. There's a DBA team here for that. What I do is a combo of database development, application dba, and data engineering depending on what's needed. I'm writing/running SQL queries every day and using Python/Shell/Powershell to script them regularly as well. Some security is involved as I am responsible for creating and maintaining user accounts so I have to make sure they only have the minimum necessary access privileges depending on what they need to to.

Why not go back to being a data engineer? You would be doing all of those things as well, no?

Very curious about my next move. Been a SOC analyst for 2 years, was a data engineer for a year before that and have an MSIS degree. Want to find something that utilizes my three best skills. I’ve looked into CTI, DevSecOps, or AppSec but none really use InfoSec, Python, and databases to the degree I would like and am capable.

I feel like there has to be some obscure thing I’ve not heard of yet. Currently on my team i’m the go to guy for automation and Python scripting but SQL is not utilized at all, don’t want it to go stale since I worked so hard to get these skills as well.

What is a good field of IT that combines security, Python, and SQL skills?