Why does it seem like so many people are trying to get out of IT fields?

that I want to try and get into cyber security or something IT related for grad school.

Depending on the specific focus in infosec: A grad program might be a colossal waste of time and money.

The vast majority of graduate (and undergrad) programs I've seen for technical infosec roles are garbage. Even prestigious, otherwise great schools have terrible infosec programs.

For example, I know of one technical university with a highly ranked CS program that also offers Masters level infosec courses. Their semester final project was to create a website vulnerable to XSS. It wasn't to leverage an XSS vulnerability to achieve a compromise or write detections/defenses against XSS. Literally all you had to do is write a website that blindly executes all JS code it sees.

I know of maybe five legitimate technical infosec programs and they're all in schools people don't really know of/think about. There's just so many bad programs and infosec degrees aren't highly valued among technical infosec folks that IMO it's just a waste of time and money. The majority of technical infosec professionals either self-taught themselves or transitioned from other roles.

By now you probably noticed I specified technical infosec roles specifically. That's because I think a grad program (specifically, Masters programs in Accounting with a tech audit emphasis) is a great idea if you're into Assurance (also known as Governance). I work as a pentester alongside a department full of Assurance folks. They all come from accounting backgrounds and their degrees + academic connections helped them land jobs here. Unlike technical infosec programs, these accounting programs are actually mature and teach relevant skills with the necessary depth.

It might not be what you think of when you think of infosec, but Assurance is a great career option that might pique your interest. Otherwise if you want a technical infosec role, you're likely better off teaching yourself + getting relevant technical certs.

Finally, if you do go the cert route, keep in mind that not all certs are equal. Generally speaking you'll want to find a well-regraded cert with a practical, not multiple choice, exam.

/r/careerguidance Thread Parent