Best Cybersecurity Certification To Get In 2024

Last week I got a question from one of my viewers on "which cybersecurity certification you should be pursuing".
This is a great question! I think many up-and-coming cybersecurity professionals have wondered about this as I tend to get this question quite often when speaking with new professionals looking to join the field.
Hope you enjoy!
🎓 FREE CYBERSECURITY STUDENT COMMUNITY:
www.skool.com/...
MY OTHER SOCIALS:
🌍 My website / blog - nicolasmoy.com
👨‍💻 Linkedin - / realnicolasmoy

[@NicolasMoy]

Join the my FREE Cybersecurity Student Community! 🎉 ➡www.skool.com/cyberpro-community/about

[@FaLkraydz]

Great video! I got Net+, got an IT job, then got Sec+, got a cyber job, but then I decided it was time to move on from multiple choice exams, so I got my BTL1 last week and will be moving on to another job if I find something that will pay me more. But as far as certs now, I'm going PJPT this year, and maybe PNPT still this year or beginning of next year. Those multiple choice certs are only to get you on an interview for an entry level position where they don't want to pay much, it's really your foot in the door. To really grasp the concepts, we gotta work off the schedule and try to understand the 'whys' behind the all that, just study for the sake of having the certification will only get us so far (it may work at the beginning but we gotta change the strategy as we move on). I'm in this process now, even passing BTL1 which is a practical cert, I still need to keep searching for the deep stuff to really understand how the network and cyber ecosystem works. Got a new sub. Thank you. :)

[@NicolasMoy]

I 100% agree. Thank you for putting effort into writing this comment. Very valuable for many others following this channel!

[@FaLkraydz]

@@NicolasMoy thank you. 🙂

[@Gravanohit]

I am a 22 year old who has been living on my own since 20. I want to know how can I make a career pivot. I work in a factory now and I am tired of it.

[@FaLkraydz]

@@Gravanohit if you wanna move into IT/Cyber, I’d start learning the CompTIA A+ certification material for few months, don’t take the cert, study Network+ and CCNA materials for few months and take CCNA and maybe even Network+ to make a volume on your resume if you want but I think CCNA would be better. Then start looking for a job in IT (even an entry level job as help desk just to get you foot in the door in IT, spend 1 year there and on the mean time, start preparing for your CompTIA Security+. Take it and try to find a junior level position somewhere else as either Sysadmin, Network Admin or SOC Analyst. Invest in making your knowledge of what you already know really solid, invest in cover some knowledge gaps if you have, the fundamentals, like for example the main network protocols like TCP/IP, UDP, DNS, DHCP, BGP, HTTPS, SMB, POP3, IMAP, ICMP, what is DNS records, difference between TCP and UDP, what is 3-way-handshake, what is the OSI model. Understanding the security concepts like what is encryption, what is hashing, difference between symmetric and asymmetric encryption, difference between hashing and encryption, what is Certification Authority, what is AAA, what is CIA Triad, what is Mitre ATT&CK Framework stuff like that. It all may sound overwhelming but trust me, all you gotta do is to read, spend time here watching videos and trying to practice how to express and explain these concepts so you can ingrain in your brain and crush on interviews. You will kill it bro. You don’t even need to copy all this that I’m saying here, once you get there, you will know this is all important and will be able to know for yourself how important it is to master the fundamentals. I’m in this process and it doesn’t take years to study what you already know. After that, you will be able to know better if you want to be in blue team or red team, or even if you want to be in Cybersecurity or purely IT, at this point you may have made up your mind well before tbh. I’ve been in IT for 3 years and in cyber for a little over 1 year. My passion still doesn’t go away. I study a little bit before sleep, wake up and listen to podcasts and Q&A for interviews, practice explaining what I know during lunch time, and repeat. I’m not even taking certification this year. Moved all my certs to next year. I’m focusing on the fundamentals only. Maybe I’ll try for CCNA to see if I get a job as Sysadmin or Network Admin that would pay more and be 100% remote but not sure. Rooting for you.

[@danielkourtney]

​@FaLkraydz Great information sir, so I'm actually in security lvl4 but I've been interested in cyber and my captain has been convincing me to to cross over to cyber security. I know it's totally two different fields but as you mentioned in your text. Should go to school for IT first before going over that way? Really ready to leave this field because of my health with knee issues. My mind is still strong though..

[@amatthew3t259]

CompTIA will help you become well rounded and prepare you for the more practical certs. Rarely will it get you a job on its own.

[@NicolasMoy]

Well-rounded is a stretch but I do agree they won't get you the role on their own!

[@Omnigear]

Hi Nicolas! Your video is the most relevant so far. I have a Sec+ and now just recently the Microsoft SC-200 certification to narrow down on my target role, which is a SOC Analyst. Now I am just running my own at-home personal cyber projects to get experience because certs are just the icing on the cake.

[@NicolasMoy]

Nice job getting clear on your goal and taking initiative! Keep sowing into these skills you are developing and you will eventually accomplish your goal!!

[@shubhamgalhotra]

Hi, if possible could you suggest some at home cyber projects that you have been working on? Something that can help in the DFIR path.

[@jordantiller]

Way too much fluff in this video. TLDR avoid generalized non skill specific certs like security+.

[@NicolasMoy]

Be nice, my guy...

[@2015RSmith]

@@NicolasMoyi think he’s just trying to provide constructive criticism. After a while i did start to feel like it was dragging on.

[@NicolasMoy]

Many of my viewers need the details I shared. It may not be core you because you’re already familiar with the information… good for you!

[@cjh6678]

See this actually helps because I was thinking about goung with Sec+

[@j-real7233]

It helped me...I'm new to this

[@cmartin8093]

What is the best place to start if someone is trying to break into the cybersecurity field

[@NicolasMoy]

Ah, the age-old question...

[@niloben659]

@@NicolasMoy How about an age-old answer?

[@jermaineblalock5553]

@@niloben659the fact he didn’t answer your question is a indicator that he is a fraud

[@JACPOT3rddd]

You need to find an online Cybersecurity Boot Camp to get into. It’s usually around 150 to 200 bucks to get in the class. The class will probably be about three days a week via WebCam, so you will need some type of laptop/computer with a camera. That will get you acclimated into the beginning of cybersecurity then from there you can take further steps so you can actually get into the “real” courses that will get you specific certifications. Those courses are about 6 to 8 months and are more strenuous and field specific. 💯👍🏾

[@JACPOT3rddd]

@@niloben659 You need to find an online Cybersecurity Boot Camp to get into. It’s usually around 150 to 200 bucks to get in the class. The class will probably be about three days a week via WebCam, so you will need some type of laptop/computer with a camera. That will get you acclimated into the beginning of cybersecurity then from there you can take further steps so you can actually get into the “real” courses that will get you specific certifications. Those courses are about 6 to 8 months and are more strenuous and field specific. 💯👍🏾

[@easyyvestv5577]

Hey Nicolas, I appreciate you touching up on this. For most of us that do have experience in the field and would like to transition into Cyber security or any area in IT. I think the most important thing to mention is that some organizations and companies are not willing to train individuals that lead up into the role they would want or need. What I mean by that is guidance, professional development, mentorship. These are very important in the field. Folks should not just stop at obtaining the job and thinking that's the end all be all. Not to be negative folks but the "I" in IT come's first and to me that means put yourself first in this industry. There are too many roles out there to not focus on a skill when entering the industry. Also just like Nick mentioned, focus on a certification that no one else is doing. You'll be surprised. With that being said good luck on the journey to everyone

[@NicolasMoy]

Taking the path less beaten is always a good option!

[@vinayvini9904]

Which certification you recommend to audit firewall and network.

[@NationalParkiOS]

Taking the Sec + soon! Definitely gave me something to consider for my next steps. Thank you!

[@NicolasMoy]

You got this!

[@ahgeez943]

Nick, understand the big takeaway as: a basket of certs is not a substitute for years of experience doing the actual job. I think that's the big misconception of people coming in to the field. That said, how does someone in your position as a hiring manager view graduate level degrees relative to certifications? Transitioning Naval Officer here. 8 years on AD, 3 of them in the field as a Communications Officer. Looking to work at the management level, plan is Sec+ (I know, but I'm already almost ready to test out so I'm just gonna get it), Masters, CISSP. Another question: how would 8 years of leadership experience, 5 of them not necessarily in the Security field look on a resume? What sorts of positions should I be looking at when making this transition to best complement my existing skillset that will help me rise in the field? To someone coming from the military, a lot of these archaic corporate titles often mean different things from company to company! Also, some of these certs do check mandatory requirement boxes. For example, if you want to work for the DoD or Federal government you often DO have to be IAT Level II or III certified (Sec+ or CISSP) to even get looked at. Same with the masters or bachelors degrees; do they not often act as glass ceiling in HR for promotions and raises?

[@NicolasMoy]

A lot of questions to address all in one post so you'll have to forgive my response as these topics are typically discussed within a 1-on-1 coaching session. To summarize briefly, the certifications you mentioned fine but they are the typical path most people take. You may have caught my commentary on this while watching this video. If not, please rewatch. Regarding the experience, your leadership experience in or out of cybersecurity can be used and will look impressive on your resume. Try to find correlations to the job req you are applying to to ensure you have the best chances of passing through the ATS and getting recommended by the recruiter. Hope this helps!

[@Brickz9uno5]

What do you think of the Google cyber security cert as an entry level person?

[@GrayOperative]

What's your feelings on Fortinet certifications? Are they worth doing or are there better options?

[@Youonlyloseyourself]

I can attest to what this man is saying. When I got into DOD without any Cert yes no cert a lot of people told me I’m lying well, still working and nothing changed. Yes they’ll give you 6 months or a year to do it.

[@NicolasMoy]

I've seen it happen at many consulting companies like Deloitte, Accenture, and their Fortune 500 clients.

[@codehokage1977]

Totally agree with you. I have a ton of Comptia certs through school and all of them that I have taken are theoretical.

[@NicolasMoy]

Exactly! 💯

[@markfrisby868]

I’m a truck driver. I’m looking to switch to the field of cybersecurity or AI. Which would be the best courses or certifications to help me?

[@joshuasankar7342]

Check the comments, google it or chatgpt

[@Lifewithketlyd_]

Did you find out

[@iq2823]

You must look up for the AI and Cyber Security Certification to reinvent the "F*****ckng AI Truck." You must go for Master in AI-Truck with Astronomy to fly Truck from Earth to Mars for free Drive.

[@greglemrow3917]

Lot of good information here, thank you for sharing. I'm sort of going for my Security+ but I do have several AWS certs including the Security Specialty. Working on setting up a home lab to help get me a bit more experience with monitoring, vulnerability scanning, and even a bit of configuration management (sidebar: would you recommend Ansible or Puppet? I understand the former is a PUSH mechanism while the latter is a PULL and I'm quite curious what you as a professional would steer toward and why). My goal is to get into security engineering, so I'm trying to make sure I get a good understanding of both cloud and on-prem environments.

[@NicolasMoy]

Both of these tools are valuable skillsets to develop in your arsenal, especially if you plan to become an automation expert to any degree. Ansible is going to be far easier to and get started with due to Puppet's DSL is going to take a bit more time to learn and become familiar with before you can really dive in. More importantly is knowing what technology your project or company uses and then learning that. If you aren't in a position that uses one of these skills, I would start with Ansible then shift to the other tools as you master them.

[@Wildmanhudson]

Dear Nicolas, This was an awesome video. There is so much content about cybersecurity certifications, and how rank against eachother You're absolutely correct, I think it comes down to the role you're applying for. Not to say that there isn't some overlap, but it's best to pick certifications in your niche. Overall, certifications is just one aspect your CV to make you stand out, and it's best to stick to enhancing your skills. Personally, I really like certifications because for whatever niche I want to learn about, I get a structured course and a hands-on final exam. I'd love to see your cybersecurity roadmap, either red-team, blue-team etc. Bonus points if that roadmap features extracurriculars outside of certifications, like Homelabbing, HTB, THM etc. Anyways great video!

[@NicolasMoy]

Yes, certifications are nice because it makes you feel like you accomplished something. But if that something doesn't help you land the job, did you really accomplish anything?

[@Wildmanhudson]

Of, course it depends on the certification. However, I've never thought certifications to be a 'golden ticket' to employment. Instead, they're just tools just like how homelabing, competing in CTF's, making write-ups, posting blogs, networking with industry professionals are also tools to demonstrate interest, and what you've done in your IT security journey. On the question of accomplishment, I think taking the exam sets a higher level of seriousness in your studies and quality of skill. Yes, this may look different depending on the level of difficult of the certification, the training for OSCP is way different than something like the eJPT, but the idea is the same. It proves that you have sufficiently mastered the skills at the level set by the certification. So have you accomplished something even if the certification doesn't land you a job? Was all that time you spent studying for the certification wasted, especially because they don't 100% reflect the real-world cyber experience? I'd say absolutely not. Yes, you should select certifications that make the most sense for you given field, but undergoing those exams, gives you invaluable experiences, insights, and skills that can help further your career. Again not to say that certifications are everything, just b/c someone has more certifications than the another in no way means that the former is better than the latter, but overall, certifications have their place in your journey. I also love the challenge, stress, and grit required to pass them. I hope this answers your question, let me know your thoughts!@@NicolasMoy​

[@adjouabakary3442]

For someone that has no ideas about this industry what are the different paths /goals to choose from?

[@NicolasMoy]

Woah boy, this is a whole video topic within itself...

[@talostheking8529]

Hey Nicolas! How is your cat doing? (I heard in the back of your cybrary course 😂) I'm in Security but have no security certs, so this video definitely helped. Thanks!

[@NicolasMoy]

You heard Lucky in one of my cybrary videos?! 😂

[@isaacrht5348]

I’m just trying to get ahead of the game I will have my cybersecurity bachelors in a year. I already have two associates one in general education and other in aircraft maintenance. Trying to find what certifications will help me best in finding a job when I leave the military in 2 years. I have zero work experience in this field but I still have my secret clearance from the DoD. I have interest in pen testing and ethical hacking so I’m assuming by your suggestions just get certs related to those? And my other question is with all of that on my resume am I going to still have a hard time finding a decent paying job

[@bringtherain94]

Great video! I was thinking about doing Axure fundamentals, admin, then security. Do you recommend that? I heard you mentioned AWS instead. Is that better? I think I’d like to stick with cloud as a career in general. Thanks!

[@Sci-Fi_Fan296]

Ty Nick. This was very helpful. I have subscribed after watching this video. Keep up the great work.

[@NicolasMoy]

Thanks for the sub!

[@frankl3027]

What is the best certification do get if you have no prior IT experience or cyber security experience? Do you have any information to answer that question? So you can possibly get a job in the field? What do you need to do to accomplish this goal?

[@dispozablehero9829]

Googles cybersecurity cert is a good starting point

[@andreavelasquez3907]

Thank you for your input. You sound very realistic and honest. No bs. I just started the google cybersecurity course and am eager to learn and hopefully pass my sec+. Just subscribed to your channel to learn more!

[@NicolasMoy]

Glad it was helpful!

[@IronNationUSMC]

As a hiring manager, would you prefer someone with certifications or someone that has a cybersecurity degree? Minus the work experience. I’m working with the VA (disabled vet) into making this decision. I love computers and when I took an ethical hackers course, I got hooked. Now I’m offered to go to school for a degree, take a boot camp, or get certifications. The University I’m considering is backed by the NSA.

[@NicolasMoy]

If I had to pick, certifications are probably more beneficial only because many of them offer some exposure to actual tools and environments. Some degrees may offer this too but they are generally less comparable to what you'll experience on the job from my experience.

[@TetrisAddiction]

Sec+ won’t guarantee you a DoD job, but without it, you are ineligible for most IT jobs in that sector. Experience is king, but education and certifications can help get you past filters in your job search and possibly set you apart. Naturally, all of the resume builders mean nothing without actually understanding and being able to apply the relevant skills for the job.

[@NicolasMoy]

I would disagree. Most jobs outside of the DoD would take you without a Security+. It's only the DoD 8140 directive that has that as a requirement for some roles, and then again many federal roles don't go off of that directive so you are really pigeon-holing yourself by following that requirement.

[@josecaro6100]

2 things I wanna say. 1. You are honest and genuine about certs n this industry needs more of it. 2. You look like Ben Affleck in that meme where he is smoking 🤣 (not in a bad way)

[@NicolasMoy]

This comment made my night! 🤣

[@Elias0405]

Thanks for letting me join your student community!

[@Triple_A_679]

Hi, there are two practical hands on certifications which i think that are similar to how OSCP and PNPT etc structured their cert exams, BLT1 by Security Blue Team and also CDP from Practical DevSecOps, they are not popular yet coz they're just new into the space.

[@marcpayz8747]

Exactly, I feel like the best certifications are the hands on practical certifications like BTL1 The theoretical ones are just to familiarize yourself with the knowledge. CompTIA trifecta has thought me more than college I think it’s worth it for beginners.

[@NicolasMoy]

I do not endorse Practical DevSecOps. They have very poor customer service! I have heard good things about BLT1 for those interested in learning security analyst skills, however, that job market is very saturated and its easy to get burned out.

[@sybex200]

If you want to enter the cybersecurity field, start learning linux. This is what i will recommend to any beginner. When i decided to migrate from network administration to cybersecurity, first i passed Linux Essentials exam and then Linux Security essentials(life time certifications).After that, any other cyber security certification will be much easier to study. Cybersecurity without linux is not possible.

[@NicolasMoy]

Linux can be helpful but its not necessary for all areas of cybersecurity. Just something to keep in mind.

[@israfaeldari5532]

I'm currently doing the google cybersecurity, is it worth doing it or am i wasting my time?

[@brettknott7692]

Doing it now myself

[@amanbedi1235]

Hi Nicolas, thank you for sharing your insight on cyber security. I need your advice should I do a cyber security course and any chance to get a job in the future. I am not from an IT background, I have 15 years of experience in fraud risk management, investigation, claims management in insurance industry. Hope to get your response soon.

[@Mezaiphon]

Confused with the statement of won’t hire someone who pass the cissp, won’t that be a start point. I am a network professional with experience in workings of security devices and looking to transition into info sec, so would attempting cissp be a bad choice?

[@NicolasMoy]

Hey man! Great question. I'll make you a video explaining this in more detail but here is a short response. The CISSP is a cybersecurity manager's certification. The whole premise behind each and every exam question is designed to test your ability to make management decisions around the 8 domains tested on the CISSP exam. If you are looking to transition into a management role and want to take on more responsibilities within cybersecurity, the CISSP is a great choice. However, if you are not interested in managing cybersecurity practitioners or teams, I would go a different direction...

[@YakuLin]

I've been learning some certs, but not certifying them (not taking the exam) and one of them is Sec+. It was really just to get an idea of cybersecurity, but my gosh, it puts me to sleep. Maybe because it was so theoretical and barely any hands-on activity. Currently a Network Engineer and I still want to get into cybersecurity nonetheless. Just thinking about what to study after the Sec+ (and potentially certify).

[@stevecochrane9531]

Thanks! I have 20 years xp as a web developer, and recently completed a Masters in Cybersecurity, the CompTIA Sec+, and in my current role, I will be moving from the "Dev" to the "Sec" in the "DevSecOps" group in our organization. 😄 Since I'll be doing internal vulnerability assessments, would you recommend the OSCP? After a year or two, I will likely go for the CISSP and/or CISM. Cheers!

[@NicolasMoy]

Nah, OSCP is mainly for offensive security professionals. It wouldn't be relevant for you transitioning into DevSecOps

[@shawnlove4502]

My daughter is a Sr. (16, turning 17 this year) And has decided not to go to college. Shes starting with Google Cyber Security just to get some familiarity with it. Do you have any advice for a younger newbie for which direction to go next? Also, im a HR Project Manager and also pivoting to tech and interested in Cyber Security. I have zero idea of the position i want just yet😣.

[@aadityapandey8238]

sir i am a student who is currently studying in computer science and engineering with cs . as i am in my 6 sem and want to learn more but the college is no help so can you tell me which certification i should do

[@julianneedsblood7091]

I am going through bootcamp right now. I am nervous but gonna give it my all.

[@abelchigombetatenda4757]

Hi sir i'm happy you mentioned PNPT and OSCP,, should i take both or one i have BSc in Cyber security and forensic audit,,, 1 yr experience as a cyber security analyst,, should i go for sec+ then PNPT/AWS certs/ later on CISSP your help is grately appreciated

[@1611cho2]

When you say 5 years of IT experience… it means in cybersecurity or could be as a IT technician? I’m jumping from IT tech support to cybersecurity and I’m on Google cert for starting my formation but if you could address my concerns about if this will be so hard to move from support to cybersecurity’s it will be very appreciated thank you for your videos.

[@ajayreddydevireddy7066]

Hi Moy, my self Ajay Reddy. D , i done my PG Diploma in cyber security in UK (march 2023). I want to start a career a cyber security , i am very confuse how start a career and i am not looking huge pay and i want to start step by step. Could you please give me a suggestion where to start and which stream in good for future. I saw your video , its gives me encouragement for to be in a cyber security.

[@Cosborn21]

Hey man i know im late to the video but im trying to find some good opinions. Im getting a degree in cybersecurity at isu. Im looking to get into certifications over the summer and throughout the school year. I was looking Google Cybersecurity Professional Certificate to start off. Do you think this is a good choice.

[@NicolasMoy]

Check out my latest video on that certification

[@roaminmusica]

I'm currently applying to herzing college to get into their cyber security specialist program, hoping its the right place to be going

[@roaminmusica]

These are the exams they say I will be able to challenge upon completing their one year course. Systems Security Certified Practitioner (SSCP) Certified Information Systems Security Professional (CISSP) Certified Cloud Security Professional (CCSP) Cyber Security Practitioner (CSXP) What else do you think I should take? I am in Canada btw

[@devetips]

@NicolasMoy Thank you for providing such realistic and valuable content. I am considering transitioning from mobile development to cloud security. To strengthen my foundation, I plan to take the Google Cybersecurity Professional Certificate. After that, I am thinking of obtaining a certificate that is specific to the cloud I'll be working with, whether it is AZURE, AWS or GCP. Do you have any suggestions? Thank you in advance for your help.

[@NicolasMoy]

AWS was my first love!

[@tapankamath]

Since you suggested that one should focus on the role and not the specialisation, would you recommend a CCSP over AWS/Azure/GCP specific cloud certification for someone interested in cloud security?

[@NicolasMoy]

I like the idea of going for vendor-specific certifications because you have to get familiar with their tools and tech in order to pass the exam. The CCSP doesn’t carry the same weight or value as the CISSP and you can learn more about the industry data security regulations and control frameworks we use as professionals by pursuing the CCSK instead.

[@xyema-mpa-ma-ma]

CCSP is focusing on the "why?" and AWS/Azure/GCP is the "how?", so ideally you'd get both and CCSK as a warm up for CCSP, though make sure to get their promo which varies between 40% and 50% off.

[@NicolasMoy]

Well, not exactly... The CCSP is a bit more focused around awareness of GRC standards for cloud while the CCSK tests you a bit more on the technology of cloud security with emphasis on CSA and ENISA resources for security assessments. Cloud vendor certifications focus on cloud vendor technology.

[@xyema-mpa-ma-ma]

@@NicolasMoy Based on my experience passing all three, CISSP, CCSP and CCSK, I'd say CCSP is a mix of CISSP and CCSK, more narrow than CISSP, a bit wider range of topics than CCSK, and certainly very poorly worded and cumbersome questions compared to CISSP.

[@NicolasMoy]

@@xyema-mpa-ma-ma thanks for the feedback!

[@zKaRiisMa]

Ok mr recruiter. What’s the best Security Analyst certification to have for entry mid n high tier (III) thanks I advance

[@NicolasMoy]

Why would you want to get a security analyst certification?

[@BrucewayneX1]

Hello Nick I am getting so confused where to start my career in Cyber Security. I have done CCNA R&S, Network+, Security+, Globally certificated in Azure 500 still I am not able to land job in cyber security. I want to be in Red Team

[@NicolasMoy]

If you want to work in ethical hacking, you need to shift your focus away from getting those certs and consider pentesting certs. It's not needed but it will help you with what you want to accomplish.

[@BrucewayneX1]

@@NicolasMoythank you for your reply. Could you please guide me where to start my pentesting or ethnical hackers journey ? What should I learn first

[@dispozablehero9829]

Want a job? Get experience! Don't have experience? Get a job! Repeat until you die

[@NicolasMoy]

I know right? Sounds like a terrible cycle. There are ways to gain experience before the job though...

[@domingoskiyasisa2082]

What is the certification for the role of cybersecurity architect? What do you recommend?😊

[@NicolasMoy]

None that I know of... Certifications really only focus on foundational concepts. There aren't many when it comes to specializations.

[@yivo9996]

One could argue the CySA+ is a role specific cert for SOC analysts.

[@NicolasMoy]

It is a bit more focused around SOC roles. Still a waste of time and money.

[@1158jag]

Have you heard of FedVTE ? The are free coures by the DOD

[@WavesAreBlu]

Hey wassup nick great video quick question I am Switching from the medical field to IT I passed the CompTIA A+ because I had no idea about IT prior and needed some knowledge I want to get into Security and ultimately cloud security I’m applying for help desk jobs rn part time… If the security + won’t really help me break into the industry what certification should I get next to give me that experience or help me break in Should I skip the security + and go straight into AWS then AWS security like what should I do need some guidance hear I know the CompTIA trifecta isn’t it so what is what Cert should I get next to at least help get into an entry level position on that path of cloud security thank you

[@NicolasMoy]

Difficult to say without knowing more about your situation but keep in mind, certifications aren't the goal. Skills development and professional branding are.

[@WavesAreBlu]

@@NicolasMoy VAGUE

[@zxph]

​@@WavesAreBlu ​For cloud security, target AWS or Azure or both. Take a look at AWS Certified Security, or Azure Security Engineer Associate. Start a lab on free tier and learn about the service offerings.

[@AMW2K10]

I’m trying to get into IAM. I picked up some okta certs since I have experience with it. I’m also looking to get Microsoft certified security compliance and identity fundamentals cert. Do you think I’m on the right path?

[@NicolasMoy]

These credentials are good options for your niche.

[@codedaddy1646]

Good stuff! Much appreciated.

[@NicolasMoy]

My pleasure!

[@nidsondesir6189]

Hey Nicolas, Why don't you recommend the PCI DSS? Can you elaborate?

[@NicolasMoy]

PCI DSS is a very small niche within GRC. There are less than 5000 jobs available in this area across the United States and most corporations want a PCI DSS auditor who has worked as or with a QSA. There are just better options!

[@Rytar]

A lot of companies can easily de-scope PCI to minimize or defer risk.

[@mayur5228]

Hey Nicolas....hope you are doing well ❤️.... I just want to ask which certification would be preferable for freshers ( like CEH, ejpt, oscp, etc) in pentesting.... Like I'm in this field for last one and half year and have intermediate knowledge and now trying to do a certification but getting bit confused.... So please guide me... Hope you find me 🤞🏻

[@NicolasMoy]

Did you watch my video?

[@therealsamw]

Such an underrated channel keep it up

[@NicolasMoy]

I appreciate the kind words! Please share with your friends 🚀

[@brettknott7692]

Doing the Google Cyber security cert now. Any recommendations on what to take next

[@NicolasMoy]

This depends on your goals ultimately...

[@brettknott7692]

@@NicolasMoy ahh ok appreciate it

[@lovelyswan80]

Any advice what certificate or degree program would be best if wanting to pursue telecom analyst hospital position?? Tia

[@thewiseowl_._]

Hi, I’m a student from comp science department….and I’m looking forward to build my career in cybersecurity….i just don’t have a clear idea from where to start….could I please get some advice from where to begin?

[@NicolasMoy]

Yes, you should consider joining my program. We have a whole team of experts who can help you with discovering that path in landing your first role in cybersecurity

[@thewiseowl_._]

@@NicolasMoy thank you sir!

[@marqwilson2653]

This was VERY helpful!!!

[@NicolasMoy]

I'm so glad!

[@Ghostthehumanist]

Well said. No certification is worth it imo. Get the outline for each exam you think is "worth it", study and keep your notes on the outline, set up RSS feeds to your platform of choice on major cyber content creators and place notes on those articles, post, blogs, etc in each related section to the cert domains. In an interview, share your screen and show them that you've gone through the content and continue to improve based on real-world examples. And start a homelab on your pc. Virtual box is free and there are a host of open-source sec tools to help you understand almost anything sec-related.

[@NicolasMoy]

I love this advice!

[@TetrisAddiction]

I look at certifications as resume builders more than anything else. They help your resume get past filters and can be a shorthand to demonstrating the general direction of your career. Of course you still need to have experience and be able to demonstrate skills, and that should also be on your resume or in your portfolio as well. Certs can open doors, but experience can get you to the desk.

[@Cambodianbreatmilk]

Thank you for the follow up Nick!

[@NicolasMoy]

Anytime!

[@josephtsegaye]

Great video, Nick!

[@NicolasMoy]

Hey, thanks again! 😁

[@hahafalseflag5090]

The security plus builds a foundation

[@brunoboaventura51]

For someone experienced as you are, you really need to practice how to convey your msg more clearly and concisely. Nine minutes talking about your life story…

[@NicolasMoy]

Thanks for the feedback!

[@cederajunior4054]

Please structure and edit your video in a way that it is easy to absorb information.

[@NicolasMoy]

Thanks for watching!

[@peanutbutterpirate935]

What is your opinion on getting CCNA for cybersecurity? I've had it suggested to me but I already have sec+ and pentest+

[@NicolasMoy]

CCNA is definitely a vendor-specific networking certification. They do have some specialties for cybersecurity but you are essentially learning network security with cisco technologies. The labor market is saturated with people that know that so I don't recommend going that direction.

[@TheHarrisal21]

Are GIAC certs worth it?

[@Youonlyloseyourself]

And yes I had some experience and some college

[@NicolasMoy]

Good to know! Thank you for sharing

[@goldielocs41]

So I'm interested in IAM I've been studying cybersecurity for the last 6 months i finished the Google cybersecurity certificate would do you think i should jump into next?

[@NicolasMoy]

The certifications I recommend here are an excellent start! If you want something a bit more sophisticated, the AWS Solutions Architect Associate is a good option.

[@rinshankar1529]

nice video sir, I recently have certain interest in Digital Forensics in Cyber Security. So is CHFI from EC council a good pathway to pursue the same? please advise.

[@NicolasMoy]

To be honest, I really don't like EC Council. The credential won't really help you with advancing into a DF career.

[@rinshankar1529]

So are there any other options to pursue the same?

[@zxph]

@@rinshankar1529 ​There are some from GIAC but those are obviously going to be very expensive. If Digital Forensics is your end goal, there aren't any other certifications targetting that specifically, at least to my knowledge. I think your best bet is landing a security role and then trying to pivot internally to doing more forensic work to gain practical experience.

[@gregorymcnair8600]

Thank you so much

[@shuaibrahim9605]

do uk any free certifications

[@NicolasMoy]

Not sure what you're asking

[@gary90001]

Thanks

[@NicolasMoy]

You're welcome

[@sanjuesthemesfacts9966]

I am interested in analyst role What are best certifications for handson practice

[@NicolasMoy]

Thanks for watching!

[@coloradolivin1626]

Jesus. Let me save everyone some time. There isn't one cert that is the best. Security plus is ok but not good enough.

[@NicolasMoy]

Attitude much?

[@Xxxfffoooxxxx]

How do you learn without the certification?

[@Brickz9uno5]

What do you think of the Google cyber security cert as an entry level person?