Penetration Tester

I have a friend in Pensacola Florida that is looking to get into the field of Penetration Testing. We were hoping to find some information on what is the best way to get his foot in the door in this field. I know this is a forensic forum, but didn't know where else to turn for this type of information. Would he be better off to get a degree first, certifications first, get into the field, or where to start? Any information at all on how to approach this would be greatly appreciated. Thanks to all in advance for any help that can be provided!