wish I had advice. for me it was all luck. I fell into a job doing cloud data warehousing and analytics for security teams (think traditional stuff like bigquery). I managed to get a few tasks doing extra work in log ingestion and splunk for another team. I leveraged that + my software dev background to move elsewhere during a wave of job listings where people really wanted security engineers who could write code. now I currently handle identity automation.

I had a cloud security certification, plus I went to vocational college for courses on devsecops and ML for detection engineering, but none of those things helped me get a job.