Ask HN: turned 40, too late to get into security?

Software dev here, did mostly Java backend work. Always had my side projects but never got enough traction and I think the start up route is not going to work out. Also losing interest in programming and looking for a new challenge.

What I'd like to do is specialize and consult. In recent years I got interested in cryptography and security in general. However I don't really have anything to show for it. I also don't know if I "have what it takes" to be working as a security consultant. Taking into account my age, what do you think, is it realistic for me to consider changing careers into security? Anyone did this? Or should I search for something else (I also like machine learning and other AI fields).