Pretty much like you said imo, i.e. useless in the industry unless you're looking for some sort of work that requires them for compliance reasons. To be fair,

Pretty much like you said imo, i.e. useless in the industry unless you're looking for some sort of work that requires them for compliance reasons. To be fair, I did recommend a cispp course (on linkedin learnings) to a junior member of my old team, mostly to complement the knowledge from the day to day work in appsec with other topics, e.g. network. Personally, I studied math & crypto (with my own passion for programming) and I entered the industry doing appsec, no certifications asked.