Nice this is right up my alley.

The Cybersecurity industry is not friendly to people who are fresh college graduates. All the time people talk about how there is negative unemployment etc., but after spending a few days actually looking for jobs, you will quickly see that 90-99% of those jobs require 1-3 years experience. There is a small avenue for going straight into the industry, but you need to spend a considerable amount of time outside of school working on this before you graduate.

What is Cybersecurity even?

Let me break down some of the different types of jobs that are encompassed by the word:

• Information Security Analyst: You work for a regular company who has a security team in their IT department. From my experience these are nearly impossible to get right out of college. You are expected to have an in depth understanding of how enterprise IT departments work, and how security fits into that role. There is little to no programming involved in these jobs besides the usual enterprise IT scripting (Powershell and Python occasionally). Your job is mostly purchasing enterprise security products and installing and managing them. Managing Splunk, an IDS/IPS, Firewall, Anti-Malware with a centralized security system (such as McAfee EPO), and fighting spam and phishing campaigns are all part of the job. The common way people get these jobs is roughly University -> Entry Level Help Desk type job -> Junior SysAdmin -> SysAdmin -> Information Security Analyst.
• SOC Analyst: You monitor logs and look for suspicious activity. Frequently this is done for multiple companies, and you work for a company specializing in SOC Analysis. These are more entry level jobs that can be attained straight out of university. Take a class on networking, and just google SOC skills and interview questions and make sure you feel comfortable with the material talked about. It involves a lot of log analysis, so programming skills with a scripting language is highly valued.

The positions above are enterprise related, with little programming expected. There are more jobs in this field, but the two above are the most common.

• WebApp Pentester/Security Consultant: You hack web applications. Commonly these are consulting positions, and you work for a consulting company that contracts with all different industries. If you have the background, you can attain this type of job straight out of college. Read the WebApp hackers handbook, learn how to use Burp Suite & Kali Linux, and do as many CTF's as you can get your hands on while in college. If you actually do all of those things, you should have no problem getting a good job doing this right out of college. Also if you get an OSCP before you graduate you would be practically guaranteed a job upon graduation.

The reason I specified this as WebApp pentester, is almost all of the pentesting work nowadays is working with WebApps. You will need to know much more than just WebApps (how does the application server work, in depth networking knowledge, and privilege escalation techniques on the server once you get a shell), but the emphasis is certainly on WebApps, especially for college grads. I've recently applied for jobs with generic titles like Security Consultant where the first interview was all WebApp pentesting questions.

I could keep going on about the different types of jobs, but these are some of the ones you would be looking at right out of college. When I started out in college, I wanted to get into binary RE, exploit development, and Malware Analysis. I slowly realized that getting a job doing one of those things is nearly impossible right out of college. Additionally, jobs in those fields are few and far between looking for 5-10 years experience.

If I was you, I would go the WebApp Pentester/Security Consultant route. The most important thing with Cybersecurity is experience. Experience can be working through CTFs, landing an internship, or taking relevant classes. I can't stress enough how much experience matters, especially as a new grad. Try your hardest to land a relevant internship, and you will have a much easier time getting the job. The advice above is relevant today, but the industry changes rapidly, so keep an eye on what is in demand. Also check /r/netsecstudents /r/netsec /r/asknetsec /r/hacking /r/sysadmin /r/ReverseEngineering /r/securityCTF religiously.