What steps should I take to get into Cybersecurity and also learning how to analyze malware?
1. learn C++
2. learn assembler
3. learn WinAPI, you can write some primitive driver, simple firewall, etc.
4. Play with a debugger, for example, x64dbg
5. Try to perform some attacks like buffer overflow bypassing various defence mechanisms using debugger (generating binary code for the attack is convenient in python by my experience).
6. Learn the TCP/IP network stack. Learn to use Wireshark.
7. Write your own keylogger, your own encryptor, your own spy - trick antivirus into not detecting it
...
Serve in the army (it often helps
)
Find a startup in the security industry. Strong C++ and assembler skills are Key.
In general, in Israel, for example, there are plenty of cybersecurity startups that require good C++ development skills or machine learning skills, but do not require experience in cybersecurity, and they often hire students. In general, it is always possible to enter in the industry, if you have such a desire. But it all depends on your country. Some countries have more opportunities, some less.
I'm writing this as I went to an open house at a couple of cybersecurity startups last year
But I'm not really much interested in it, so this is amateur advice.