> I've often thought about cybersecurity as something I'd like to specialise in

Well I think these kind of thoughts are quite common. IMO it is helpful to realize that your thinking (rather dreaming) about doing cybersecurity may have very little to do with what it would actually feel like to acquire the necessary skills and find a gig (or some gigs).

Your choices are rather simple:

1. Dive straight in headfirst. Quit or change your job to part-time and commit to intense training in cybersecurity (e.g. enrolling in structured training program of some kind).

2. Find time, energy and motivation to learn/practice without changing your life radically or committing to anything. If you are seriously interested in something you'd be naturally drawn to do this thing. After a few months of doing so you will have a much better idea what switching careers would feel like.

3. Keep doing whatever your doing realizing your ideas and feelings are completely normal and valid but may have little to do with cybersecurity or your career. Try to understand what is actually missing in your life and how you can address the root cause.

And even if he does 1 and 2 , why would anyone even interview him let alone hire him with no experience?

Ageism is real in the industry. But it’s more nuanced. If you have experience commensurate with your age, a strong resume, and a network, the world is your oyster.

If you have none of those or your experience is with outdated tech, you’re screwed.