Is AppSec/DevSecOps attractive career choice to be a specialist? Do you recommend any courses or certifications?