Sine you already know frontend, I would recommend starting with burpsuit and web exploitation. The issue with cybersec is that there are just too many things you can/need to learn, so the best thing would be to start with the area you already know something about.
https://portswigger.net/web-security is a great resource to get you started.
Good luck!