What I can share is my roadmap how I manage to break into the field without any prior professional IT experience.
1) Linux. Learn it and live in it.
2) Linux servers and databases.
3) CompTIA Network+ (only for the knowledge, didn't bother getting the cert)
4) CompTIA Security+ (same as above)
5) OSCP certification (not a golden ticken by any means but it helps to bypass HR)
That's basically it. While going down that road I focused on hands-on practice by actually hacking into machines with the help of following resources:
A) Hack The box (hackthebox.eu)
B) PentesterLab (pentesterlab.com)
I also really like Portswigger's Web Security Academy (portswigger.net) and Try Hack Me (tryhackme.com) but they weren't around when I was starting out but I would definitely check them out, especially if I was completely new to security today.
All in all it took me roughly a year but get comfortable enough to start applying to junior pentesting positions and eventually I got hired.
There are probably better and easier ways to do it but that's how I did it at least.
1) Linux. Learn it and live in it.
2) Linux servers and databases.
3) CompTIA Network+ (only for the knowledge, didn't bother getting the cert)
4) CompTIA Security+ (same as above)
5) OSCP certification (not a golden ticken by any means but it helps to bypass HR)
That's basically it. While going down that road I focused on hands-on practice by actually hacking into machines with the help of following resources:
A) Hack The box (hackthebox.eu)
B) PentesterLab (pentesterlab.com)
I also really like Portswigger's Web Security Academy (portswigger.net) and Try Hack Me (tryhackme.com) but they weren't around when I was starting out but I would definitely check them out, especially if I was completely new to security today.
All in all it took me roughly a year but get comfortable enough to start applying to junior pentesting positions and eventually I got hired.
There are probably better and easier ways to do it but that's how I did it at least.