Learn about all things IT, get a helpdesk job, or an SA job, or Netadmin job. You really need to at least have a good foundation of knowledge prior to going into security. I have a helpdesk and a sysadmin background with both my CCNA and CCNA Security and multiple other certs and a degree and I got my first job in security. At least in my role I work with helpdesk, netadmins, sysadmins, etc. I do vulnerability assessments and together we develop a plan of action to determine update priorities and milestones. I honestly think I would be lost without my previous knowledge.

As for what I think is an important foundation to have. Helpdesk is mostly windows related, so learning more about the OS, registry, local security settings, event viewer. Sysadmin - Active Directory, group policy, security groups/distribution groups, permissions such as NTFS vs Share, PKI, knowing some Linux is good as well. Networking - Subnetting, Switching and Routing (maybe go for your CCENT or Net +), OSI Model, learn network protocols. Security - Go for your Security +, this will help in landing a Government job or contract.

​