One should start with Programming first. Get hands dirty with machine code, learn devil coding practices, exploit writing etc.
And then, as a programmer you will know what is a vulnerability and it will be easy for you to imagine things in a hacker way.
You also can test your own apps, fix vulnerabilities. One should start from self. The golden rule to begin: A hacker should think like a programmer and a programmer should think like a hacker.
So if you want to get start you can check out the link:
Cyber Security Certification Course
You can also check out the video:
What is Cyber Security? | Edureka - YouTube