Get your OSCP. Learn how to automate security tools. Learn Splunk. Learn cloud infrastructure. Use pentesterlab.com. Be able to dev in Python. Read threat reports and become familiar with the various threat actors. Learn some hacking history. Read all of the old zines. Do that and you'll be ahead of most.