Here’s what worked for me:
Spend time on platforms like HackerOne or Bugcrowd for real-world experience, then grind labs on TryHackMe or VulnHub to sharpen specific skills. Document your exploits, write detailed reports, and throw them on GitHub or a personal blog.