Is 40 too old for cyber security?

No, 40 is not too old for cyber security, in fact 40 is a very common and ideal age to enter or transition into cyber security in Australia, with many successful career changers starting at 40, 45 and even 50. Cybersecurity values maturity, life experience, problem-solving and communication skills, which people at 40 often have more than 20-year-olds. The Australian Government's Cyber Security Strategy 2023-2030 specifically encourages career changers, veterans, women and mature workers to enter cyber, with TAFE offering free Certificate IV in Cyber Security for all ages. Job market data shows average age of cyber security workers is mid-30s to early 40s, with many CISOs in their 40s and 50s. Employers often prefer mature workers for governance, risk and compliance roles that require business understanding, stakeholder management and policy writing. Transition paths at 40 include completing Certificate IV in Cyber Security in 12 months at TAFE, then Security+ certification, then entry-level SOC analyst role at $75K to $95K, progressing to $120K+ in 2 to 3 years. Many ex-military, police, IT support, trades and teachers transition at 40 and do well. Age discrimination is less common in cyber than other IT fields because of skills shortage, with 10,000 unfilled roles. Skills like critical thinking, attention to detail and ethics are more important than age. So 40 is not too old, it is actually a great age to start cyber security, with 20+ working years ahead and strong demand.