what differentiates real security experts from script kiddies?

i think quite a few of us probably started as script kiddies - i know i definitely did. hacking shit is cool and fun! but you quickly reach a point where the lack of fundamental knowledge is a huge barrier.

i've been studying compsci for 2 years now and trying really hard to lock in on the important stuff. linux, python, bash, core networking concepts etc.. i want to upgrade my skills so that i'm genuinely valuable to an employer and not just someone that can screw around with a bunch of gadgets (though i love my pwnagotchi like a son)

what are the most important things to know? even the boring stuff like IAM - i just wanna know how i can put myself ahead as much as possible.

i would also love advice on how to build a portfolio in cybersecurity... i can't even imagine what a cybersecurity portfolio would look like, to be honest.