Advice for a developer moving into App Sec

I have a few years of experience as a software developer. I've always worked for security companies, on security products. So I have a lot of security knowledge floating around somewhere that I've gained by osmosis, but I don't really use it on a day to day basis. I'd like to break into application security, but the only actual experience I have beyond what we do as developers is a few CTFs and some minor reverse engineering experience. I also …

advice app app sec cybersecurity developer moving sec