There are a ton of different directions that you can head in and focus on. I encourage you to start/look at stuff that you're genuinely interested in and excited about.

I've written a "Getting Started" guide for security researchers that people have said is helpful. I hope it helps you out :) https://blog.bugcrowd.com/getting-started-bug-bounty-hunter-...