There is no set route. There are many former sys admins, former software developers, and many self-taught people in the industry. Though as the list above show

There is no set route. There are many former sys admins, former software developers, and many self-taught people in the industry. Though as the list above shows there are a lot of universities offering degrees in Cyber Security. If you were able to get a job with a pen-testing company in the UK they will pay for their employees to sit the Crest Exams.