Try application security. Knowing the backend of what you are testing and how to get around it is a big plus. Competent web application testers and those that can do code review are in demand. Take a look here https://portswigger.net/training and here https://tryhackme.com/ The only problem with security is that depending on position there might not be a direct way to move up.