QA/Security engineer, is it possible to merge branches?

Question

Career in IT

Hello!
The next question, I'm currently working as a support (with partial participation in cua). I chose the next branch of development for myself - Security Engineer, I want to see myself as a pentester. At work, they told me that this is a long way (I understand this myself) and offered to start with kua with further development into pentesting. I'm actively studying network \ cryptography (I just like it), so far I'm only dealing with theory.
The question itself may seem incorrect, but is it possible to combine training (initial level cua / pentesting) in practice? Perhaps someone can tell where to start so that you can practice at the same time? I myself have a technical education, so I am pouring into information quickly. Do not judge strictly the description, googling gives information separately (separately for cua and pentesting). I plan to study the Kali Linux distribution (just start with Linux) for pentesting, but I understand that this is not for beginners (maybe! Just my opinion)

Answer 1

On the contrary, the path is quite fast, look at the same Khomakov, once he broke the github on a long-known bug and took off.
Pentesting is more about thinking than taking the long way.

Answer 2

Agree and go to QA.
Because support is the most beginner level. which any yesterday's student can replace (simplifying a little). QA is already a specialist. There, the level of responsibility is higher, and the salary is higher, and the opportunity to finish teaching Java / Python to switch to automating and conditionally grow to a salary of 100k plus.
If you refuse QA, you can hang out in support and remain without growth and without money.