[ackatz]

Lots of great advice from people so far.

My two cents: not a lot of people talk about doing entry-level consulting as a pathway into in-house security roles but it's worth considering (and not without its bad parts as well).

I wrote this blog post about it if you're interested: https://www.akatz.org/posts/cybersecurity-grads-should-consi...