Skip to content

Latest commit

 

History

History
131 lines (94 loc) · 4.46 KB

README.md

File metadata and controls

131 lines (94 loc) · 4.46 KB

Certification Roadmaps by Role

Structured certification paths for different cybersecurity career tracks. Each roadmap provides a progression from entry-level to advanced certifications, with estimated timelines and skill development guidance.

Available Roadmaps

Defensive Security

  1. SOC Analyst

    • Monitor and respond to security incidents
    • Timeline: 4-6 years to senior level
    • Key Certs: Security+, CySA+, GCIH, GCIA, CISSP

  2. Incident Responder

    • Investigate and remediate security breaches
    • Timeline: 4-6 years to expert level
    • Key Certs: Security+, CySA+, GCIH, GCFA, GREM

  3. Security Engineer

    • Design and implement security solutions
    • Timeline: 5-7 years to senior level
    • Key Certs: Security+, CySA+, SecurityX, CISSP, CCSP

Offensive Security

  1. Penetration Tester

    • Ethically hack systems to find vulnerabilities
    • Timeline: 3-5 years to expert level
    • Key Certs: Security+, PenTest+, CEH, OSCP, OSEP, GXPN

  2. Application Security

    • Secure software development lifecycle
    • Timeline: 4-6 years to senior level
    • Key Certs: Security+, CEH, CSSLP, OSWE, GWAPT

Architecture & Governance

  1. Security Architect

    • Design enterprise security frameworks
    • Timeline: 7-10 years to architect level
    • Key Certs: Security+, SecurityX, CISSP, CCSP, SABSA, TOGAF

  2. GRC Analyst/Consultant

    • Governance, Risk, and Compliance
    • Timeline: 4-6 years to senior level
    • Key Certs: Security+, CISA, CRISC, CISSP, ISO 27001 Lead Auditor

Specialized Tracks

  1. Cloud Security Engineer

    • Secure cloud infrastructure and services
    • Timeline: 4-6 years to senior level
    • Key Certs: Security+, AWS/Azure Security, CCSK, CCSP, SecurityX, CISSP

  2. Threat Intelligence Analyst

    • Analyze and disseminate threat intelligence
    • Timeline: 4-6 years to senior level
    • Key Certs: Security+, CySA+, GCTI, GCIA, GOSI

  3. Network Engineer (Security-Focused)

    • Secure network infrastructure
    • Timeline: 5-7 years to senior level
    • Key Certs: Network+, Security+, CCNA, CCNP Security, CISSP

How to Use These Roadmaps

  1. Choose Your Path - Select the role that aligns with your career goals
  2. Start at Your Level - If you have experience, enter at the appropriate certification level
  3. Build Skills - Use related projects to practice concepts between certifications
  4. Get Hands-On - Certifications alone aren't enough - build real-world experience
  5. Stay Current - Security evolves rapidly - continuous learning is essential

General Advice

Entry-Level (0-2 years experience)

  • Start with CompTIA Security+ regardless of chosen path
  • Build foundational skills before specializing
  • Practice on free platforms (TryHackMe, HackTheBox)
  • Contribute to open-source security projects

Mid-Level (2-5 years experience)

  • Specialize in your chosen track
  • Pursue advanced certifications (OSCP, GCIH, etc.)
  • Gain practical experience in production environments
  • Start building a professional network

Senior-Level (5+ years experience)

  • Consider leadership certifications (CISSP, CISM)
  • Mentor junior team members
  • Contribute to the security community
  • Focus on strategic thinking and business alignment

Certification Comparison

By Organization

CompTIA - Vendor-neutral, broad knowledge, good for entry/mid-level Offensive Security (OffSec) - Hands-on, practical, highly respected for pentesting GIAC/SANS - Deep technical knowledge, expensive but comprehensive (ISC)² - Management-focused, industry standard for senior roles EC-Council - Ethical hacking and security tools

By Cost

  • Budget-Friendly: CompTIA certifications ($300-400 per exam)
  • Mid-Range: (ISC)² certifications ($700-750 per exam)
  • Premium: SANS/GIAC certifications ($2,000-8,000 including training)
  • Hands-On: Offensive Security ($1,000-2,500 with lab time)

Related Resources

Last Updated: January 2026

Back to Main README