Cybersecurity certainly makes money. The good ones make a lot. I mean a lot.

But if you think you can just study for a year and get some security certificates and call it a day, you're going to be sorely disappointed in the compensation.

OP means internal to a company security ops don't generate add on revenue. Cybersec definitely adds revenue to services and provider companies.