4th year CSE student — how do I break into cybersecurity when my college only gets SDE companies?

I want to start ethical hacking from zero and build a career in cybersecurity, but my college placements are mostly SDE roles.

How do students usually get cybersecurity internships/jobs off-campus?

What roadmap, skills, certifications, labs, or projects should I focus on as a beginner?

Would really appreciate guidance from people already working in cybersecurity.