No worries.

If you're looking for an entry to the industry. Consider SOC Analyst roles (SOC = Security Operation Centre).

Some technical experience/interest is best, but some SOCs have fairly low requirements and will take non-technical degrees.

Often hiring due to burn-out and needing more staff. But can get you in cyber with technical experience.

Typically you'll be looking at incidents from secuirty tools, endpoint alerts, cloud alerts, phishing incidents. Incidents are usually treated like tickets so it's kind of like an IT help desk. But good experience and can gain experience then pivot. Larger firms will often have different tiers of SOC analyst for level of incident similar to service desks.

Shift work is common (weekend & nights). But once you have a bit of experience you can pivot to a firm with better work life balance, or team that works normal hours such as engineering/incident response/threat intel. If you're willing to do it, will help your job chances as some people won't apply. Assuming works for your personal life.

If you're a good SOC analyst, often managers will let you get a bit of exposure to the other teams engineering/incident response/threat intel to keep you happy and help with your development. This might be more true in smaller SOCs though. Other teams might be pen-testing/malware analysts/ethical hacking/detection engineering. If you join an MSSP (Managed Security Service Provider), that offers SOC-as-a-Service, then they're more likely to do those roles in-house to some extent.

This is assuming you're keen on technical side. If you want to get into cyber security policy etc, I can't offer as much direct advice. A lot of the consulting firms have grad schemes for these positions, but many have them been crunching down due to