https://securingdev.github.io/posts/breaking-into-infosec/
Advice for breaking into InfoSec - securing.dev