3 ms·
I've been in security for the better part of a decade. I have none of these certs (I have no security certs at all). The OSCP is the only certification in this
by tidepod12 6y ago
I've been in security for the better part of a decade. I have none of these certs (I have no security certs at all). The OSCP is the only certification in this list that I've ever even heard of being part of hiring discussions, and even then I've really only ever seen it required/desired in penetration testing roles.
In fact, this article is very narrowly focused on penetration testing-type roles. There are a whole host of other security roles that require all kinds of different skillsets which aren't even mentioned here.
If you do want a penetration testing role, I don't see anything wrong with this roadmap other than the fact that it over-emphasizes the need for certs. Like all other types of roles, some hiring managers might be part of the "certification chaser" crowd and might require certs for candidates, but IME most don't care and someone not having a cert has never stopped me from hiring them, and quite frankly if someone does have certs it doesn't make me any more inclined to hire them.
- tptacek 6y agoI've spent much of the last 15 years hiring pentesters and not only have I never considered OSCP, I've never talked to a peer that did either. It may be a big thing with body shop netpen firms; don't work for those.
- jiveturkey 6y agoyou’re probably in a tech company. most security jobs (most software jobs period) are in non tech companies. insurance, healthcare, auto parts, you name it. in most of those roles, certs are very helpful if not mandatory to even get your foot in the door.
- deleted 6y ago[deleted]