How does one get into their first cybersecurity job?

I have been a web application developer for 6+ years and I am starting to take interest in application security and privacy.

I was wondering if any of you had tips to get started with application security and privacy and potentially land their first job?

Thanks!