Take some online classes for penetration testing tools and then practice using them. The goal is to learn enough to provide some value for pen testing of real products. Originally I was hoping to have a real cloud to pen test, but that appears unlikely so I plan to set up an Apache web server instead as the system under test. It won't matter much as the goal is to learn to use the tools.