My experience is similar. I got drawn into the I. T. security field in the early 1990s Internet era due to my technical background and experience. It was fun and rewarding at first. But by the late 2000s the huge burden of responsibility, general business hostility towards security, expensive credentialisation, a lack of corresponding compensation, and limited career options, led me stop doing it. Programming is still fun and way less stressful.