Step 2 for software developers moving into cybersecurity:

Pick one direction. Not all of them.

Security engineering. Application security. GRC. Offensive security.

Most developers try to learn everything at once.

Networking. Linux. Cloud. Hacking tools. Certifications. Frameworks.

Six months later they are overwhelmed and no closer to a job.

Pick one direction early. Go deeper instead of wider.

Trying to learn everything is the fastest way to get stuck.