If you were starting from scratch today with the goal of building a cybersecurity company, what would your next 5 years look like?

For cybersecurity professionals:

If you were a 21–25 year old BCA graduate starting over today with the goal of becoming highly skilled and eventually building a cybersecurity company, what would your next 5 years look like?

What would you focus on?

What would you avoid?

What would give the highest return on time invested?

I'm looking for realistic advice, not motivational answers.