I think you’re right. You can try to switch to product companies where the salary is 2 to 3 times your years of experience. But if you aren’t a developer, your efforts might not work right away. Information security (CISSP) analysts, on the other hand, get paid well. It has a lot to do with what you do now. If you work hard at CISSP, I am certain that you can make 10 lakh in a year. Check out the average salary in the link from a reputable site. It is possible for you to become an assistant manager or a similar position. Getting a certification won’t guarantee you a job, but it will give you an edge over other candidates who will have to work harder.