Is the Security+ Still a Good Certification to Get? | The Problem with Cybersecurity Certifications

[@WithSandra]

Let me know your thoughts on this video :D 👇 Thanks for watching! More learning resources below: 📚 Google Cybersecurity Certificate: imp.i384100.net/k0R0rz 🧭 Springboard Cybersecurity Bootcamp (Get a Job or Your Money Back Guaranteed - $1000 off Code WITHSANDRA): www.springboard.com/landing/influencer/withsandra 💡 Ace your cybersecurity interviews with my Cybersecurity Interview Prep Mastery Course: learn.withcybersecurity.com/ 📕 Get My FREE Cybersecurity Beginner Roadmap Guide: www.withsandra.dev/ Stay Connected: 👯 Join our Discord :D - discord.gg/2YZUVbbpr9 Connect on LinkedIn: www.linkedin.com/in/withsandra/

[@ClarkdeLeon]

What is the best sec plus review online? I already have a job and passed my net plus. Get sec plus to maintain credibility as I will be the cybersecurity personnel.

[@butterlesstoast97]

The short answer is yes. It has become the baseline Cyber Security certification. Many government IT Jobs, not just strictly cyber security jobs, require Security +. There is a reason the military requires all of its cyber personnel to acquire Sec + in their training pipelines.

[@Minerva-Shield]

Outside of entry IT positions change Many to All, All IAT lvl 2 require Sec+ (or one of the other 4 acceptable 8140 certifications) for Privileged access so it is mandatory, IAT lvl 1 Does not require a Certification for Sec+ just education or A+ CSD I think and Net+

[@Minerva-Shield]

there is IAT lvl 1 / 2 / 3. A+ being the easiest way to satisfy IAT lvl 1 / Sec+ the easiest to satisfy lvl 2, & CASP+ being the easiest to satisfy lvl 3

[@Minerva-Shield]

you can still land a job without the cert based on education according to 8140 it's Education or Certification or Work Experience (factors in and accounts for many diff pathways) but you will still be required to obtain one of the recognized Cyber certs to become 8570 compliant for privileged access to touch a DoD network as an Admin

[@butterlesstoast97]

@@Minerva-Shield I work as an analyst and have CySA +, CEH, and Sec + to satisfy the DoD

[@Minerva-Shield]

@@butterlesstoast97 I was just posting that to inform readers that All DoD (DoD Specific) IT jobs require some sort of Cyber Cert to even start working

[@jlprescott7243]

Yup, just got my Security+, ISC2 CC, GFACT, and GISF in 2024. Attending SANS for a BS in applied cybersecurity with GSEC and GCIH certs coming up. Got in to IT since 2003 with no certs and just my degree in CIS. Currently, working as an IT manager. Cheers!

[@ever6]

Thanks for sharing your positive experience 🎉

[@imanigordon6803]

Starting my new job as an IT manager next week I’m only 25!

[@jlprescott7243]

@@imanigordon6803 - Don't be discouraged by the current job environment. Instead, prepare. Be aware of the IT trends (eg. AI, machine learning, robotics, cybersecurity, etc.). The only thing constant about technology is change. I've been through different economic cycles and recessions. In 1988 in university, I majored in architecture. I was looking forward to design buildings and skyscrapers after graduation. One event that changed that was that the architecture school I attended lost its accreditation and I could not afford to go to out-of-state university. I was lost for a time as I watched my peers moved ahead in their careers and got left behind. It didn't take me long to realize the emergence of the personal computer and its impact in business. This is how I got into IT and haven't had any regrets since then and graduated with a CIS degree.

[@MrBlondE2802]

​@@imanigordon6803that's nice, do you have some resources you can share please

[@inmortal131]

For it manager you need some certificates or no?

[@imanigordon6803]

I think Cybersecurity and IT is a simpler path than Software Engineers. Getting a cert and paying a small fee for education for the amount of money you’ll get in the future seems like a better deal than having to deal with coding interviews where it’s on the spot and you could easily get filtered out if you don’t have a high technical ability. In my opinion software engineers have a much higher pay but for a higher failure rate.

[@Omnigear]

Hi Sandra! I have my Sec+ since last year of May 2023 and I still haven't landed a job. I don't think anything is wrong with my resume, it's just that the market is so saturated with companies that seek those with years of experience. I don't think it's impossible, but the market indeed has changed. As of now I am just trying to make myself the best fit I can be for employers by tailoring my resume to their needs. I might just think networking is the optimal way of landing a entry Cybersecurity job.

[@WithSandra]

I'd highly recommend checking out this recent post I came across today about how this person found his cyber job - www.linkedin.com/posts/fredrick-way-b1528680_networking-infosec-newjob-ugcPost-7205923024640884737-LLw0 Yes 100% - Networking is still king at the end of the day, connect with cyber professionals (our discord is a great place for that! - discord.gg/2YZUVbbpr9 ), learn about their jobs, keep an eye out for the job listings they share, and dont be afraid to cold-DM a hiring manager. IT CAN MAKE A HUGE DIFFERENCE. I'd focus more on this job application path than just cold-applying to job applications because people can actually put a face to a name, and it shows initiative since not everyone is doing this. Best of luck to you applying, you got this!!🙌

[@thefiredguy]

I don't have sec+ and related experience, but 3 months ago i landed cybersecurity job

[@AngelTorres-ot6mb]

Wow this is why I'm like should I learn it 🤔🤔

[@inaabdi743]

@@thefiredguy How ?

[@BrianBWrestling]

Hey guys just wanted to let you know that I’m a Computer Information systems student at my local community colleges and some of my CIS courses offer programs to students that offer free voucher codes to COMPTIA exams. I just passed a networking class in the spring and received a net plus voucher code. If a school or employer can help cover exams I say go for it and use your resources

[@FoxTrot_2134]

Professor Messer explained this very well, if not perfectly well. Certifications are great only if the hiring manager is asking for it. Passing the interview is what get you through the door, NOT certifications. Will they help you? Yes. Does it guarantee you the job. Absolutely not. P.S. I'm not saying this against anyone. I just saying this for clarity's sake. That is all🙃

[@Minerva-Shield]

I did the backwards method for my first Systems Administrator job working for the DoD, I was able to get the job with no experience, no education, and no certifications. So now I'm working my way backwards to get them done to satisfy DoD requirements for my position. Great video

[@prodfr4ud]

can you explain further into what you did to secure that job?

[@99IXIX]

I got Security+ to land a government IT job, but it's been impossible competing with people who already have clearances. And I'm up against veterans who have clearances. At this rate, I might as well enlist just to get my foot in the door. Anyone else dealing with this struggle?

[@xinn3]

Yes, I watched from John madkor. You may have to go that route. As military, you will get clearance quicker, sadly.

[@WithSandra]

From what I've seen, any gov work or gov contractor work is going to choose clearances above those who don't have them, I'd highly consider trying for the lowest clearance level since that'll highly increase your chances, otherwise have you considered consulting agency roles? Sometimes they'll hire on external consultants for non-clearance related work which could be a good way to pivot in.

[@ucyberwolf]

Military and DoD clearance investigations are not the same thing. Vets get a leg up because of the veteran hiring preference, but they need to go through a full clearance investigation just like you would off the street. Defense contract jobs with clearance requirements are easier for vets because those clearances are the same. For DoD Civilian jobs, it won't matter if you have a clearance or not at most agencies, as they don't use it for selection criteria. You can be granted an interim while the investigation is flowing. For contractors, the cost and time to sponsor clearing someone are high, so most firms want you to already have it. Look for the ones who say they will sponsor instead. Pro tip. Depending on where you live you can get a second job as a janitor or something for the clearance to get in the door and then pivot back to IT once its been granted.

[@Srpolloloco]

I have sec+ and an active secret clearance and still can't get anything.

[@Minerva-Shield]

@@ucyberwolf your first sentence is so technically wrong lol. the only instance of it's validity is in the fact that DHS has a diff Clearance process, outside of that tiny niche. Yes a Military Clearance investigation for someone on active duty and a DoD Clearance investigation are exactly the same. You're aware the DoD is the Military correct? like I said with the tiny niche that DHS handles their own clearances on some occasions. my NACLC (National Agency Check/ Local Agency Check) Investigation that I did for my secret clearance when I went active duty is the exact same as my NACLC that I did for my DoD Civilian Job to get it renewed, same with SSBI (Single Scope Background Investigation) for my SCI. you process a NACLC the same exact way for a Active duty service member as you would a DoD Civilian, Because you're both part of the DoD I hope this clears up some things for people reading. I agree with the rest tho, but do not join the military to get an IT job lol just be local, get your Security+ to be 8570 Compliant (soon to be 8140 IAT lvl 2 technician to earn privileged access to be an administrator) and be willing to accept jobs to get experience. there are so many late night Contracting help desk gigs fueled by young up and coming IT professionals, alot of people will turn down Contracts like this which is why most of these contracting companies will pay for your clearance ( a DoD Clearance if the contract is for the DoD) work for a year, get a resume built, then apply for a DoD Civilian job with Certs, Work experience, and a Clearance under your belt.

[@Liftheavy85]

Currently trying to transition from a support role within my company over to security and your videos have helped me learn a lot. No interview scheduled yet but they said its coming so hopefully I can wow them enough to take a chance.

[@armanifar2024]

Hey Sandra, I really enjoyed this video. You’re definitely knowledgable in your own right🙏🏻

[@bradleyolinger1691]

@WithSandra, I am lucky enough to not only have a grant covering my entire degree program(double in cybersecurity and administration of justice), but my particular college, the offer vouchers(one a semester, up to two years after you pass the class with at least a B) to cover many of the CompTIA exams. My plan is to use Network+, Security+, and Linux+ as my foundation, and should have all three early next year. My plan is primarily to focus on Digital Forensics/CyberCrime, but do intend to develop additional skills as well.

[@maxfrischdev]

The certification "Industry" is a money making machine FOR the certification and training providers. The same way KZbin and Linkedin is used as a "money making machine" playing the Engagement game, praying on the desperate, who need a job, selling false Dreams, BS courses and overpriced "Coaching sessions". Same spiel. (To be clear, I am not referring to THIS video as an example for the latter. Although basically almost all content creators HAVE to do that, as that is how the game works and where the money is at, I appreciate this and many of Sandra's videos! 😊👍)

[@robisingo2633]

jut for content , you are good

[@StevenKell]

Comptia just seems to be irrelevant these days. No one recommends actually getting any of their other certs. They might recommend studying to get the knowledge but not to take the exam unless your employer is paying for it.

[@anna.eis4]

This ^ nowdays from what I’ve seen, the only certifications that really open doors are the ones from Cisco and Red Hat. They have hands-on and practical exams so you won’t really see all people on Reddit with “No exp, I’ve taken my Security+ in 2 weeks”. This kind of flex/behaviour only makes the certification so insubstantial really.

[@imanigordon6803]

Yeah only the trifecta is useful because it helps with entry level pretty much. I wouldn’t recommend any others because at that point specialization is required after entry level

[@evanj51]

I like having a broader range of knowledge so then I can specifically study what I want/need.

[@WithSandra]

A cybersecurity generalist who can also specialize - perfect 💯👌

[@sailorstarprincess]

if you're planning to get sec+ i would do prof messar. I just passed recently and only used his materials nothing else with no prior knowledge in this field. still look for a sec+ related job but I loved learning the content (:

[@ryanpodgurski4617]

Thanks for the info Sandra!

[@WithSandra]

NP! Glad this could be helpful! :D

[@GeorgiaMade404]

The thing about certs is you need them but they’ve also taken advantage of this by requiring renewals. Security + used to be grandfathered but now it expires every 3 years. Some certs are only good for a year which is nothing more than a money grab.

[@Blanketz_]

Hey the book you listed is for the SY0-601 exam which is being retired next month. Do you have any recommendations for the SY0-701? Thanks!

[@thedevil4981]

Yup it is still a good cert to get, I know many employers wont even consider you if you don't have it.

[@TechwithLuca]

awesome insight! Thank you Sandra

[@WithSandra]

Glad it was helpful!

[@maxfrischdev]

Thanks for the video! Damn, you talk fast! I was just watching a video course before on x1.7 and had to slow you down to x1.4 to be comfortable 😀

[@InclusiveCyber]

I'd think it was 5yrs ago but anymore. I don't care if any applicant has the certifications or not. And my job descriptions have eliminated all education and certification "requirements" It will depend on their passion and curiosity during the interview. @WithSandra great video as always. Curious to know what program you use for editing.

[@WithSandra]

Always great to hear the perspective from the hiring side for cybersecurity roles, thank you for sharing! 🙌 I actually have an editor who helps with editing and I believe they use Premier pro!

[@InclusiveCyber]

@@WithSandra Thanks for answering my question! Have a good day!

[@kishawnlewis4635]

I think the certification in cybersecurity is necessary in comparison to software engineer for the purpose of compliance. A software engineer may never have to be accountable or responsible for protecting a company or like the military.

[@brucejohn11]

Will be doing a cyber security bootcamp interview next week

[@AreeshaAftab-kk3nv]

how did it go?

[@ltManifesto]

companies ask for CISSP certs apparently not knowing that you have to have at LEAST 5 years of cyber experience as well as peer rviews from people in the field to be qualified to be certified (as stated by ISC2 themselves on their website). you can take the test but wont get the actual certification until you meet the requirements...so not sure why so many even have it anywhere near an entry level job listing. basically alot of certs that are higher than security+ (SSCP for example) needs at least 1 year of proven cyber experience.

[@DrMerciless]

Cybersecurity is not entry level and all those ads you might see to go study to become cybersecurity qualified and get a job entry level it's all b*******. The only possible way to get an entry level is by knowing somebody who is willing to bend the rules for you.

[@jepjepVLOGS]

For me as a Network Engineer right now, is that possible that I can go to cybersec roads? may i know the advantages or disadvantages? and need to focus before jumping into it? Thank you!

[@avacheung2295]

I have noticed that my current role as an IT Business Analyst offers limited opportunities for salary growth, knowledge expansion, and a sense of achievement. Consequently, I am considering transitioning into the cybersecurity industry. However, given that I have worked as a Business Analyst for several years, it would be challenging for me to accept a significant salary decrease. In your opinion, would my previous experience in IT projects be valuable in applying for a role in cybersecurity?

[@bradrickrobinson7452]

IT Certs are like Pokemon; "Gotta catch them all"!!!🤣

[@Wesjapa100]

6:42 Yeah, that is the most ridiculous/hilarious thing about Cyber job hunting! 🤣🤣🤣😂😂😂

[@senorsleepy2359]

Not if you’re trying to learn cyber. If you’re just trying to check a box on the resume sure

[@armanifar2024]

Is Sec+ 701 exam easier than the Sec+ 601 exam, I heard it’s more cloud security focused

[@deboman81]

On the real, if you don’t get a job, there are plenty more opportunities. Trust me. Don’t let the downers tell you different. That’s why I don’t look at too much social media like I used to anymore.

[@rudymendoza7993]

Where do you take the CompTia security+ exam ?

[@emilymadrigal6922]

When you worked as a security analyst, what department were you a analysts in?

[@YaySyu]

Great timing

[@maahi7489]

i have cysa+ but i dont have security+ and I'm applying for entry level jobs do i need to get security plus+ as well or i should focus more on projects and more practical certificate.

[@mic9253....]

Is there any good resource that you can recommend for the PBQs in preparing for the Security+ cert exam?

[@samqh9071]

hi there , i am preparing myself for syo 601 sec+ , from COMPTiA study tools and practice exam ,,, AM I going to have same question as compita practice exam or different in real exam ?

[@kumaramit4]

Hello Sandra ! I'm your KZbin subscriber please suggest me i have just one question please. If I'm a cybersecurity specialist and i don't have any high school diploma or bachelor degree can i eligible jobs in US ?

[@tommypham1101]

No, 100% you won’t get even a help desk role 😂. Let’s be realistic. You can have a+, net+, sec+ other certs under the sun.

[@WithSandra]

With the current job market, I know experience cyber professionals who're having trouble finding a job so I can't argue with that 😅 but when I was just starting out my career pre-pandemic, I was able to easily find entry level jobs I qualified for with just beginner level experience and a cert, times do change fast tho

[@semperfidelis6235]

With that attitude, you won't get a HD role! Secondly, too many H1 visas in the US and lots of offshoring roles does not help the USA market. I know for a fact you can get a HD role right away. Its about attitude and believing you can get a role. When I hire, I look at attitude and be willing to be trained. I put the global IBM Connections Cloud up and running in 2015 with devops and some devsecops. So, stay positive!

[@semperfidelis6235]

@@WithSandra - Hey, its Primero / FV. Thanks for that GRC info via email this last week. Cheers!

[@imanigordon6803]

I didn’t need certs I got an internship in college it’s about putting yourself out there and having the skills to be taken a chance on show enthusiasm and home projects

[@cyberathletics719]

There certs. It’s a paper lol. They help get you in the door you still need experience and a good resume paired with it. All the cert shows is that you were able to dedicate time and learn something.

[@TechRRR-gi6jv]

Hi there Sandra, im currently doing CISCO cybersecurity online course, is it a good start? And what would you say i could do next to get recognition in cybersecurity job market?

[@WithSandra]

If you're taking a Cisco cert, i'm assuming you're interested in networking/IT, in which case the CCNA is still pretty popular. For general cyber tho, I'd start with the Google Cyber cert ( imp.i384100.net/k0R0rz ) or just go straight into studying for the Security+ if you have the foundations. Lots of different paths you could take here if you already know what area of cyber you want to go into, ex. red teaming (htb,tryhackme), blue teaming (lets defend), grc (unixguy's GRC mastery course), etc. Above all else tho, make sure you're networking on LinkedIn NOW so when you start applying, you already have made some connections with those in the field and keep an eye out for job listings ppl share or repost (and even asking for referrals!) Best of luck to you! 🙌

[@fairah76]

Hi Sandra, I am doing a 4 month boot-camp in Cybersecurity and they are preparing us for CompTIA CySA+. Is that better than Security+ ?

[@ajramirez77]

Damn a boot camp for CySA? I passed that with Jason Dion's CySA video series and Tryhackme SOC Lvl 1 training

[@imanigordon6803]

It’s not as popular but could be useful

[@fairah76]

@@imanigordon6803 CompTIA Security+ is foundational knowledge, CompTIA CySA+ is one step up Intermediate + foundational and its more difficult

[@tubesism]

Ok but… what the fuck do I do instead? I have the comptia a+ and I have absolutely no idea what I should study next. People just recommend “learn cybersecurity” and “do projects”. Like… how? What is the path?

[@imanigordon6803]

If you want to be in IT the main skill you need to have is self research and determination to solve issues if you can do that you’ve already put yourself to the back of the line.

[@musikhippie4030]

Certs just aren't easily accessible for college graduates who are looking for a job. $400 is a lot to students and with emphasis in certs in the Cybersecurity field its really disheartening and unmotivating. On top of that the certs arent even really worth anything than getting past HR, u can have a sec+ and have no experience and never be given a chance. Certs seems necessary but also useless. I just graduated and started looking for jobs and it made me wonder if I've wasted the past 4 years studying tech. Now I'm going for my master's in IT focusing on Cybersecurity and I hope I'm not wasting my time here in the IT field. I've only been applying for a couple weeks but seeing all of the doomers talking about IT is disheartening for sure.

[@dalewood5560]

Good cos iv got it on my list to get 😅

[@carsonjamesiv2512]

LUCK is NOT GUARANTEED!🤣😂

[@akirohitan4698]

She looks like a certain celebrity.

[@DrMerciless]

It's 100% a worthless certification. Don't even bother getting it. In fact most employers do not care about any of the CompTIA certifications

[@deboman81]

How so?

[@DrMerciless]

@@deboman81 Comptia is only good for help desk.

[@Wesjapa100]

I wish you were right, but HR managers look for people with the Security+. That's the unfortunate reality!

[@LindsayIna-r2t]

Walker George Taylor Nancy Miller Kimberly

[@TheNguyenben85]

Helllloooo

[@fm00092]

No. Cybersecurity is not in demand for workers. Don’t get the certifications and switch your degree to something else if you’re actively doing cybersecurity. If you’re not in the job already, realistically it’s not in the cards for you. There are plenty of other jobs out there.

[@butterlesstoast97]

Not true, there is a big need, and will be an even bigger need for cyber security talent.

[@k.e.reternal2437]

There is a big need for it in gov tech

[@Travelinlad]

Hello Sandra. I recently passed the Security + 701. Can I still take the recommended bootcamp?

[@fredpit6116]

Yes it’s absolutely worth it. Don’t listen this gurus on web