cyber security

For someone with an IT background who wants to move into cybersecurity, what’s the best way to build real-world experience?

There are so many certifications out there (CompTIA, CEH, etc.), but I’d love to know which ones actually help in getting that first role or project.