In the US, the cert most often expected is sec+.

Generally you should look at job listings and work backwards from there. Most companies use software like nessus and splunk, and there are plenty of free alternatives to those and others that you can play around with.

Competency in networking (firewall rules/acls, routing, subnetting) and programming (python, powershell, bash, batch script) are a big benefit.