Skip to content

certification-guide.md

Latest commit

 

History

History
243 lines (184 loc) · 7.56 KB

certification-guide.md

File metadata and controls

243 lines (184 loc) · 7.56 KB

Cybersecurity Certification Guide

A comprehensive guide to cybersecurity certifications, including cost, difficulty, value, and study resources.

🎯 Certification Decision Framework

When to Get Certified

  • ✅ Starting in the field (baseline knowledge validation)
  • ✅ Career transition (demonstrating commitment)
  • ✅ Job requirements (many positions require specific certs)
  • ✅ Skill validation (OSCP proves hands-on ability)
  • ❌ Collecting certs without practical skills
  • ❌ Before having foundational knowledge

ROI Considerations

  • Entry-level: Certs matter more, open doors
  • Mid-level: Skills and experience matter more, certs validate
  • Senior: Specialized certs signal expertise, not required

📊 Certification Comparison Matrix

Entry-Level Certifications

Certification Cost Difficulty Prep Time Best For
CompTIA Security+ ~$400 ⭐⭐ 2-4 months General security roles, government
eJPT ~$250 ⭐⭐ 1-2 months Practical pentesting beginners
(ISC)² CC Free exam ⭐ 1 month Absolute beginners
Google Cybersecurity ~$50/mo ⭐ 3-6 months Career changers
CompTIA Network+ ~$360 ⭐⭐ 2-3 months Networking foundation

Intermediate Certifications

Certification Cost Difficulty Prep Time Best For
OSCP ~$1,600 ⭐⭐⭐⭐ 6-12 months Penetration testers
CySA+ ~$400 ⭐⭐⭐ 2-4 months Blue team/SOC
PenTest+ ~$400 ⭐⭐⭐ 2-3 months Pentesting (less valued than OSCP)
AWS Security Specialty ~$300 ⭐⭐⭐ 2-4 months Cloud security
AZ-500 ~$165 ⭐⭐⭐ 2-3 months Azure security
GCIH ~$2,500 ⭐⭐⭐ 2-4 months Incident handling
GPEN ~$2,500 ⭐⭐⭐ 3-5 months SANS pentesting

Advanced Certifications

Certification Cost Difficulty Prep Time Best For
OSWE ~$1,600 ⭐⭐⭐⭐⭐ 6-12 months Web application security
OSEP ~$1,600 ⭐⭐⭐⭐⭐ 6-12 months Advanced pentesting
OSED ~$1,600 ⭐⭐⭐⭐⭐ 6-12 months Exploit development
CISSP ~$750 ⭐⭐⭐ 3-6 months Management/Architecture
CISM ~$760 ⭐⭐⭐ 2-4 months Security management
GXPN ~$2,500 ⭐⭐⭐⭐ 4-6 months Expert pentesting

🔍 Detailed Certification Profiles

CompTIA Security+ (SY0-701)

Overview: Industry standard entry-level security certification.

Aspect Details
Cost ~$400 exam fee
Format 90 questions, 90 minutes, passing ~750/900
Validity 3 years (CE credits to renew)
Prerequisites None (Network+ knowledge recommended)

Study Resources:

  • Professor Messer (Free YouTube) - Excellent, comprehensive
  • Jason Dion (Udemy) - Practice exams highly recommended
  • CompTIA CertMaster - Official but expensive
  • TryHackMe Security Engineer Path

Timeline: 2-4 months with consistent daily study

OSCP (PEN-200)

Overview: The gold standard for penetration testing. Proves hands-on ability.

Aspect Details
Cost $1,599 (Learn One) - $2,599 (Learn Unlimited)
Format 24-hour practical exam + report
Validity Never expires
Prerequisites None (but 1+ year experience recommended)

What's Included:

  • Course materials and lab access
  • One exam attempt

Study Resources:

Timeline: 6-12 months of focused preparation

Tips:

  • Enumerate harder than you think necessary
  • Document everything as you go
  • Take the exam when you can pwn HTB medium boxes consistently

AWS Security Specialty

Overview: Premier cloud security certification for AWS environments.

Aspect Details
Cost $300 exam fee
Format 65 questions, 170 minutes, passing ~750/1000
Validity 3 years
Prerequisites 5+ years IT security + 2 years AWS (recommended)

Study Resources:

  • AWS Skill Builder (official)
  • Adrian Cantrill courses
  • Tutorials Dojo practice exams
  • CloudGoat for hands-on

Domains Covered:

  1. Incident Response (12%)
  2. Logging and Monitoring (20%)
  3. Infrastructure Security (26%)
  4. Identity and Access Management (20%)
  5. Data Protection (22%)

CISSP

Overview: Management/architecture focused. Often required for senior positions.

Aspect Details
Cost ~$750 exam fee
Format 125-175 adaptive questions, 4 hours
Validity 3 years (CPE credits)
Prerequisites 5 years paid experience across 2+ domains

Domains:

  1. Security and Risk Management
  2. Asset Security
  3. Security Architecture and Engineering
  4. Communication and Network Security
  5. Identity and Access Management
  6. Security Assessment and Testing
  7. Security Operations
  8. Software Development Security

Study Resources:

  • (ISC)² Official Study Guide
  • Thor Pedersen video course
  • Destination Certification MindMap videos
  • Boson practice exams

Key Insight: CISSP tests "think like a manager" not "think like a technician"

📋 Certification Roadmaps by Role

SOC Analyst Path

Security+ → CySA+ → GCIH → GCIA
                ↓
           Splunk Core User

Penetration Tester Path

eJPT → Security+ → OSCP → OSWE/OSEP/OSED
                     ↓
              GPEN/GWAPT (alternative)

Cloud Security Path

Cloud Practitioner → SA Associate → Security Specialty
                                        ↓
                    AZ-500 / GCP Professional Security

GRC/Management Path

Security+ → CISA → CISM → CISSP
                    ↓
               CRISC / CGEIT

💰 Budget Considerations

Free/Low-Cost Options

  • (ISC)² CC: Free exam
  • Google Cybersecurity Certificate: ~$150 total
  • TryHackMe certifications: Included with subscription
  • AWS Cloud Practitioner: ~$100

Employer-Sponsored

  • Many employers pay for certifications
  • Negotiate training budget in offer
  • Some companies require certs but pay for them

Self-Investment ROI

  • Entry-level certs often pay for themselves quickly
  • OSCP can increase earning potential by $10-30K
  • Calculate: (expected salary increase) × (years) > (cert cost)

⚠️ Common Mistakes

  1. Collecting certs without skills - Certs open doors, skills keep you employed
  2. Wrong order - Don't attempt OSCP before fundamentals
  3. Ignoring expiration - Plan for renewal costs and time
  4. Only book study - Hands-on practice is essential
  5. Speed over depth - Understanding > passing

📅 Renewal and Maintenance

Certification Renewal Requirement
Security+ 3 years 50 CEU credits OR retake exam
OSCP Never N/A
CISSP 3 years 120 CPE credits + $135/year AMF
AWS Certs 3 years Recertification exam (50% cost)
SANS/GIAC 4 years 36 CPE credits OR retake exam

← Back to Main README