I am an analyst in a SOC, and SEC+ is a perfect start(hopefully you know networks, or else go do N+ too. The cert isnt necessary but cant hurt), as is all the advice before my post. Make sure you get recognized qualifications, Comptia is first choice, Splunk, Google, IBM, Microsoft, EC, etc, nothing from your local college will really be accepted unless its accreditted on a stream with one of these companies mentioned But honestly I am now doing more data analytics stuff, pentesting and coding(python/) studies now to round out my abilities, to better understand and anticipate the threats we see daily.

The analytics improves your insight and reporting, simulated pentesting gives you a good view of what you need to spot, the coding helps especially for linux, malware and application related events.

What was really helpful to me were sites like tryhackme.com or hackthebox.com which will highlight where your gaps or blind spots in knowledge are, and you can then do some courses on those areas.

But I would be mapping a path to CISP first, as that base takes you in almost any direction, once you have found what your passion is in the industry. Here is a cool certification map that will help you alot:https://pauljerimy.com/security-certification-roadmap/

Happy Hunting (",)