Always cracks me up thinking about how much the press talks about cybersecurity being in demand then looking at the actual IOT and embedded cybersecurity market.
Everyone should be very, very scared about infrastructure/medical security and the effective lack of anyone doing anything about it.
I'm sure web/network pentesting is doing well though.