Troy Hunt writes about careers in security, ethical hacking and advice on where to get started:

• Get involved in online infosec discussions
• Establish an online identity
• Get some learning
• Get some certs (maybe, if applicable)
• Get some experience
• Put in your time

Read the whole thing, it’s good.