What should a junior information security specialist be able to do and how to become one?

Question

Information Security

Well, I’m wondering what exactly a novice specialist in this field should be able to do, how to look for a job in the direction and where? I understand that the vacancy is not very common, right? What do juniors usually do?
Of course, an abstract question, but still, I want to hear the opinion of the community. And is it possible to retrain from a web developer or is it too late?

Answer 1

He must read the Rainbow Series, RD of the State Customs Committee of the Russian Federation, be able to distinguish MAC from DAC and build threat models. It's never too late to retrain as a web developer, but why? It's better to be a good web developer than a bad infobez specialist.