Think about what kind of roles interest you and try to take up work/certifications which are related to that role. If you think that incident response is an area you're keen in, try to get into ops cluster to gain the exp before leveraging on that exp for your exit opps. If you're keen on governance, risk, compliance type of role, try looking at their CII side which can provide threat risk assessment exp.