A MacBook Pro with a recent M4 or M5 will be more than capable of what you describe.
If you have specific heavy apps or tools needed, look up the recommended system configurations, and meet (or exceed) those.
You’ll want an external hard disk of probably three times the internal storage capacity as a Time Machine backup device too, or a NAS if you have the budget.
With that out of the way…
Information security covers a whole lot more than a laptop, from app design to system design to networking design to malware and breach remediation to penetration testing to the bottomless mire that is IoT, and a whole lot more. Some of that can happen with and on a laptop, but a whole lot won’t. Or will involve other gear.
Much of your work in information security can potentially be (or will be) happening on guests, too. Not directly on your own (production) gear. Oh no, definitely best not running anything iffy or nasty or gnarly directly on your own (production) gear.
If the guests are not hosted somewhere remote (OVH, Hetzner, AWS, digital oceans) then they’ll be running as guests on servers you’re maintaining. Maybe as containers using Docker. And even if you’re doing your own secure app design and such, you’ll usually be running networks.
If you’re not getting a head start on IT by running your own NAS services on some spare x86 box with TrueNAS, or one of various dedicated NAS boxes including Synology. Synology NAS boxes can also run DNS services, LDAP, and other common services that can and do need security. Running NAS on a Linux guest or box also gets you Kali and related tooling, as well as LDAP services and such. Another IT path here is Windows and Windows Server, as well as Azure, Entra, and the rest of that world.
For your own gear, the Serve The Home website has some suggestions on cheap used server-capable gear in their TinyMiniMicro series.
TL;DR your laptop will be a tool, one of many. And a whole lot will be happening elsewhere. Don’t get to wrapped up.