Greetings // Certification path question

nikter

Hey there everyone. I just joined, names Justin. Wanted to introduce myself, give some of my background and then pose my question.

I'm 34 and have been working in the IT field for the past 16 years. For the last 9 I have worked as a Network Specialist for the local Police and Fire departments. I studied for A+ early in my career but never took the test. Just recently I sat for the Network+ N10-06 exam and passed on the 2nd attempt! (In fact it was from posts on these forums that helped point me to the Certmaster and bundle package with the free test retake that helped me out greatly in that regard as I am paying for my certs out of my own pocket right now.)

Now on to my question before I begin to bore. I'm currently studying for the Security+ exam and am about 30 percent through my material. My end goal is that, with my experience and current work towards certifications, I would like to get into the InfoSec field, starting possibly as an analyst but eventually getting hired as a penetration tester. With that goal in mind, am I on the right path working with Security+ then maybe moving into CEH or straight into CISSP? I want to make sure I don't waste time or money on something that won't directly help my new career aspirations.

Also other question is, do you think attempting to get into the InfoSec field by starting as an analyst is a good idea or are there other ways I can get my foot in the door?

Any and all help or advice is greatly appreciated. I look forward to being part of these forums!

Nik 99

Hello and welcome.

I'm not an infosec person or anything, but everything I read from other people on this forum says Security+ is an excellent starting point, and a basic requirement for some jobs I hear. Dunno if you already have the basic knowledge from Sec+, but if you don't you'll want it to move on to your next cert, no matter what you chose to go with.

Hopefully my info is correct. Otherwise someone will shoot it down soon enough =P

ITSec14

I think that's a good path! The Sec+ is definitely a good starting point. Personally, I've read through the C|EH material and don't see much of the value for on the job knowledge, but it's definitely something that gets you attention on your resume for jobs. For that reason I say you should get it. Lastly, the CISSP is an obvious cert to obtain because of it's reputation and can potentially increase your market value in the long term.

Honestly, I would do the Sec+ first, then pursue the CISSP after because a lot of the concepts in the Sec+ will help you in your studies for the CISSP.

nikter

Thanks to both of you for your replies! I definitely will continue with my Security+ material then. Hope to sit for the exam in the next few weeks. I hear its much better than the Network+ (that thing was really difficult given the mid-level cert it is). I actually already have a CISSP Online Course through Vizual Coaching so I will probably work on that once I'm done with my Security+.

DatabaseHead

My analysis on certifications in demand by job title.

As soon as you can get the CISSP you do it. C|EH was a modest ~10% but in relation to the other certifications it was one of the most desired ones.

http://www.techexams.net/attachments/forums/jobs-degrees/8118d1478742945-security-job-requirements-degrees-certifications-final-v2.jpg

nikter

DatabaseHead wrote: »

My analysis on certifications in demand by job title.

As soon as you can get the CISSP you do it. C|EH was a modest ~10% but in relation to the other certifications it was one of the most desired ones.

http://www.techexams.net/attachments/forums/jobs-degrees/8118d1478742945-security-job-requirements-degrees-certifications-final-v2.jpg

Very good information. Thanks!