My advice? Get your foot in the door somewhere and get some time in the trenches. Unfortunately, networks/data are usually are held ransom, generally, bc of a weak security posture and careless end-users (phish). Relatively unsophisticated but effective.