[redweka]

There is no set route. There are many former sys admins, former software developers, and many self-taught people in the industry.

Though as the list above shows there are a lot of universities offering degrees in Cyber Security.

If you were able to get a job with a pen-testing company in the UK they will pay for their employees to sit the Crest Exams.