Thank you so much Kip Boyle and Jason Dion for having me on your podcast!
https://www.yourcyberpath.com/podcast/89/
Three Principles for Breaking Into Infosec:
β’ Start with the free/cheap stuff.
β’ Be driven by interest.
β’ Network.
Here be ~dragons~ scammers. There are way too many bootcamps that target new people that aren't worth a tiny fraction of what they're charging. The best way to avoid them is by starting with the excellent free/cheap training.
My favorites here are Practical Ethical Hacking by Heath Adams and SOC Core Skills/Intro to Security by John Strand
Cybersecurity is a vast. If what you're learning isn't valuable, there's nothing wrong with pivoting to learn something else. In the end, cybersecurity has a funny way of even familiarity of knowledge from one domain to help out in understanding another.
The worst case scenario is your learning becoming bogged down or worse halted completely. When you struggle to find the motivation, reevaluate if what you're learning is providing value. If not, drop it. Since you started with the free/cheap stuff, you didn't lose much.
Finally and most importantly is networking. Meeting people and establishing relationships is the only way I got in the industry. I put out over 130 job applications and none of them compared to the one person on the inside that helped me get a foot in the door.
Where do I meet people online? Twitch. I absolutely adore the infosec streaming community. It's so much fun hanging out and completing challenges and learning live. I highly recommend it. You can use the tool below to see who's online right now:
https://infosecstreams.com/
You can also meet people on Discord. Just like the name suggests, Discord is the embodiment of chaos so the only way I can handle it is muting channels/servers liberally and only keeping up with around three servers.
Online friendships are great but nothing beats IRL networking. The best way of doing that in my opinion is hanging out at a local BSides or DEF CON chapter.
TD;DR Learn starting from cheap/free resources and focus on what's providing value to you. Then you'll be ready to leverage your new network of online and IRL to get your dream infosec job.