Skip to content

README.md

Latest commit

 

History

History
141 lines (99 loc) · 4.99 KB

README.md

File metadata and controls

141 lines (99 loc) · 4.99 KB

Certification Roadmaps by Role

Structured certification paths for different cybersecurity career tracks. Each roadmap provides a progression from entry-level to advanced certifications, with estimated timelines and skill development guidance.

Available Roadmaps

Defensive Security

  1. SOC Analyst

    • Monitor and respond to security incidents
    • Timeline: 4-6 years to senior level
    • Key Certs: Security+, CySA+, GCIH, GCIA, CISSP

  2. Incident Responder

    • Investigate and remediate security breaches
    • Timeline: 4-6 years to expert level
    • Key Certs: Security+, CySA+, GCIH, GCFA, GREM

  3. Security Engineer

    • Design and implement security solutions
    • Timeline: 5-7 years to senior level
    • Key Certs: Security+, CySA+, SecurityX, CISSP, CCSP

Offensive Security

  1. Penetration Tester

    • Ethically hack systems to find vulnerabilities
    • Timeline: 3-5 years to expert level
    • Key Certs: Security+, PenTest+, CEH, OSCP, OSEP, GXPN

  2. Application Security

    • Secure software development lifecycle
    • Timeline: 4-6 years to senior level
    • Key Certs: Security+, CEH, CSSLP, OSWE, GWAPT

Architecture & Governance

  1. Security Architect

    • Design enterprise security frameworks
    • Timeline: 7-10 years to architect level
    • Key Certs: Security+, SecurityX, CISSP, CCSP, SABSA, TOGAF

  2. GRC Analyst/Consultant

    • Governance, Risk, and Compliance
    • Timeline: 4-6 years to senior level
    • Key Certs: Security+, CISA, CRISC, CISSP, ISO 27001 Lead Auditor

Specialized Tracks

  1. Cloud Security Engineer

    • Secure cloud infrastructure and services
    • Timeline: 4-6 years to senior level
    • Key Certs: Security+, AWS/Azure Security, CCSK, CCSP, SecurityX, CISSP

  2. Threat Intelligence Analyst

    • Analyze and disseminate threat intelligence
    • Timeline: 4-6 years to senior level
    • Key Certs: Security+, CySA+, GCTI, GCIA, GOSI

  3. Network Engineer (Security-Focused)

    • Secure network infrastructure
    • Timeline: 5-7 years to senior level
    • Key Certs: Network+, Security+, CCNA, CCNP Security, CISSP

Want 1-on-1 guidance? I offer a mentorship program where I personally help you get certified, build real projects for your GitHub, rewrite your resume, and land your first cybersecurity role. Learn more

How to Use These Roadmaps

  1. Choose Your Path - Select the role that aligns with your career goals
  2. Start at Your Level - If you have experience, enter at the appropriate certification level
  3. Build Skills - Use related projects to practice concepts between certifications
  4. Get Hands-On - Certifications alone aren't enough - build real-world experience
  5. Stay Current - Security evolves rapidly - continuous learning is essential

General Advice

Entry-Level (0-2 years experience)

  • Start with CompTIA Security+ regardless of chosen path
  • Build foundational skills before specializing
  • Practice on free platforms (TryHackMe, HackTheBox)
  • Contribute to open-source security projects

Mid-Level (2-5 years experience)

  • Specialize in your chosen track
  • Pursue advanced certifications (OSCP, GCIH, etc.)
  • Gain practical experience in production environments
  • Start building a professional network

Senior-Level (5+ years experience)

  • Consider leadership certifications (CISSP, CISM)
  • Mentor junior team members
  • Contribute to the security community
  • Focus on strategic thinking and business alignment

Certification Comparison

By Organization

CompTIA - Vendor-neutral, broad knowledge, good for entry/mid-level Offensive Security (OffSec) - Hands-on, practical, highly respected for pentesting GIAC/SANS - Deep technical knowledge, expensive but comprehensive (ISC)² - Management-focused, industry standard for senior roles EC-Council - Ethical hacking and security tools

By Cost

  • Budget-Friendly: CompTIA certifications ($300-400 per exam)
  • Mid-Range: (ISC)² certifications ($700-750 per exam)
  • Premium: SANS/GIAC certifications ($2,000-8,000 including training)
  • Hands-On: Offensive Security ($1,000-2,500 with lab time)

Related Resources

This is a lot to tackle alone. If you want someone guiding you through the certifications, building your projects, and getting your resume right — my 1-on-1 mentorship covers the full process for 90 days. certgames.com/mentorship

Last Updated: January 2026

Back to Main README