There are 5 paths in cybersecurity:

1. Break systems (Offensive)

2. Detect attacks (SOC)

3. Build defenses (Engineering)

4. Manage risk (GRC)

5. Lead strategy (Management)

Pick one first.

Everything else becomes easier.