Current cybersec journey:

Doing BTLO labs. It gives hands on experience and has taught me a lot so far. I will sit for my BTL1 (Blue Team Level 1) in a couple weeks hopefully. This cert is less well known but tests so much hands on unlike other entry level certs. Splunk, Wireshark, Autopsy, and lotsa OSINT.

After that, CySA+ bc it is industry recognized and checks a box.

Then, CCD (Certified Cyber Defender). It is another very hands on lab focused cert, like a mini forensics degree.

There are sooooo many options for certs and it has taken a while to figure out what is a good route, given my skill level and education.

I am thinking that after a SOC role then I would move to IR comms. My years long Zen practice and conflict resolution training will come in handy.

Reply to this note

Please Login to reply.

Discussion

Yeh it can be really hard to decide on what path to go down initially because there’s so many cyber security certs/courses. Although I’m a pen tester (so slightly different to blue team) I’d say you’re100% doing the right thing in going for lab-focussed courses. I know so many people that do a ton of multiple choice exams but have zero technical skills. Certs may help with resume screening but technical knowledge will open more doors in the long run

Thank you for the reply. I am def putting in proof of work with the lab certs to up my skill level. Uncomfortable up front but yes looking for the long term gains. May I ask your path to pen tester? I have seen some suggested paths and eventually will consider OSCP.

Yeh that’s definitely the best approach. In the UK it’s slightly different so I did loads of Hack The Box for a while (which is good because people can track your progress and what sort of skill level you’re at). Then I did CREST certs. Outside of the UK though, I’d say for a pen tester the best path is to do hack the box and then move onto OSCP. For me, Offensive Security courses are the gold standard for pen testing

I havent tried HTB, but from people's comments, it seems it is more challenging lab-wise than TryHackMe. I will check it out sometime. Good chatting 🤙