Many start in the military and eventually move to private sector. However, an ever growing percentage just straight up go to college to learn the skills.

Cyber companies are in the fortune 100 now, and it's not like it used to be back when you actually had to be interested in it and dedicate your life to learning the skillz from shady forums. Now it's just a job to most practitioners.