I'm a dev studying in my free-time security and malware reverse engineering mainly because I think it's an interesting subject, and so I was wondering,

if I wanted to make it my main job, do you have tips to go about it and is there demand for it ?

Would you recommend some kind of RE certification, or maybe I should start writing a blog about it and try to use that as leverage for interviews ?