When looking to breakout in the Infosec field you will need to learn this simple secret to success.
1) Be passionate about it.
2) Learn all you can. Volunteer for jobs that are going undone. When I was coming up in the IT field (IT was my passion) I found lots of security jobs going undone and I asked my bosses if I could do them. Very few of them told me no. This gave me lots of hands on experience to be able to increase my resume status. I learned a lot through trial and error. I set up lots of test networks with old equipment that was lying around. In learning how to setup IT networks I could learn how to better protect them. It also gave me insight into what my proposed security changes might effect. This helps me when dealing with the groups that will be affected by my infosec ideas and plans.
3) Be willing to do extra even if it means not getting paid for it now. I did a lot of extra stuff that was not in my job description that other people were supposed to be doing. Even though I could have denied the extra work and made others do it, I didn't. My pay was experience, not dollars. However that experience turned into lots of dollars later when I was able to apply for better jobs. I have seen too many people turn down a learning experience because they felt their employer was "Abusing them by making them do things without getting paid for it". IF it enhances your skills, take it on happily, even if it doesn't, having a supervisor/manager in your corner doesn't hurt either when applying for internal positions.
4) Pick an area of expertise and try to become very good at it.
5) If given a chance to learn managerial skills by taking on extra duties, do it. If you want to get above worker bee status, you will need to know about management and leadership qualities.
6) Soak up free information. You can search this forum for podcast recommendations. Do it and then listen to them. I like the Paul Security (security weekly) ones because you can learn a lot of the industry jargon by listening to them. Even if it is over your head, keep listening, you will get it eventually.
7) Get certified. It will help level the playing field when competing against others. I was qualified for several jobs just because I held the CISSP. One job I know it was the deciding factor. They had posted it as a job applicant requirement and I was their second choice. Their first choice said he didn't have it and WASN'T going to get it. Since I was a highly qualified second choice and I already had it, they offered me the position.
These are some basic ideas to get you started. Keep returning to these forums to learn more.
