1) Linux. Learn it and live in it.

2) Linux servers and databases.

3) CompTIA Network+ (only for the knowledge, didn't bother getting the cert)

4) CompTIA Security+ (same as above)

5) OSCP certification (not a golden ticken by any means but it helps to bypass HR)

That's basically it. While going down that road I focused on hands-on practice by actually hacking into machines with the help of following resources:

A) Hack The box (hackthebox.eu)

B) PentesterLab (pentesterlab.com)

I also really like Portswigger's Web Security Academy (portswigger.net) and Try Hack Me (tryhackme.com) but they weren't around when I was starting out but I would definitely check them out, especially if I was completely new to security today.

All in all it took me roughly a year but get comfortable enough to start applying to junior pentesting positions and eventually I got hired.

There are probably better and easier ways to do it but that's how I did it at least.