topic Re: Do I need additional certifications after getting CISSP? in Career Discussions

Do I need additional certifications after getting CISSP?

Shilpa — Mon, 25 Apr 2022 22:09:03 GMT

Hi All,
I recently received my CISSP certification. I am very happy and proud of it!
However, when I apply to jobs, the feedback I have received so far is, CISSP is nice to have but I need additional certifications.

e.g. Cloud certifications OR
CCNA, Network+ OR
Various products and tools certifications

Do I need all those certifications as well? Without these keywords, my resume is not reaching the hiring managers. Has anyone else experienced this? Please advise. Thanks!

Re: Do I need additional certifications after getting CISSP?

joeadu — Tue, 26 Apr 2022 12:48:02 GMT

It’s difficult to answer your question without knowing the specific roles to which you’re applying. For example, if I’m looking for a principal cloud security engineer, having a CISSP alone would likely not be enough; I’d need to see other experience or evidence of knowledge related to cloud technologies and securing resources within the cloud. Out of curiosity, who specifically is giving you that feedback? Are you hearing this directly from hiring managers?

Re: Do I need additional certifications after getting CISSP?

Shilpa — Tue, 26 Apr 2022 14:04:34 GMT

I am not looking for a specific role. I am applying to every job where they prefer candidates with CISSP.
I have a Master's degree in engineering and more than 12 years of experience in IT industry.

I am trying to get back into workforce after a career break (raising kids).

I have not talked to any hiring managers yet. This feedback is from a recruiter who is advising me to get more certifications to make my resume competitive.

Re: Do I need additional certifications after getting CISSP?

ericgeater — Tue, 26 Apr 2022 14:17:55 GMT

Congratulations on the CISSP! But I agree with Joe. You need to show which direction you prefer to point. CISSP focuses on security and leadership, so you might study for CySA+ or CEH to add some technical security proficiency to your resume. You could add CISA for accountability or auditing.

Re: Do I need additional certifications after getting CISSP?

tmekelburg1 — Tue, 26 Apr 2022 14:39:36 GMT

Like @joeadu said, each market is going to be a little different. It sounds like you're applying for jobs that are more technical and less managerial. The CISSP isn't going to be very helpful in positions requiring technical knowledge of systems or how to specifically make changes within those systems. Eventually it will be as you move up the career ladder.

So if you're applying for an analyst or engineering position, you'll need to either get the technical certifications or highlight more technical experience on your resume that's more inline to what they're looking for in those roles.

Edit: After looking at your reply, I'd try to improve the resume that highlights your 12 years of experience. Also don't apply for every role that says, 'prefers CISSP'. I've seen SOC or entry level/mid level positions with wording like that and it's silly. They're trying to 'bump' their job advertisement level up by adding CISSP for key word searches from applicants. Steer clear of them if you can.

Re: Do I need additional certifications after getting CISSP?

Shilpa — Tue, 26 Apr 2022 14:44:17 GMT

I appreciate everyone taking time to write.

In your opinion, which roles are more managerial and less technical? That is the path I would like to explore.

Re: Do I need additional certifications after getting CISSP?

Shilpa — Tue, 26 Apr 2022 14:51:59 GMT

Exactly! So many jobs say 'prefer CISSP' and then you never hear back from them even though they are 'urgently hiring'.
Thank you for this insight. It makes perfect sense. I would steer clear of such postings.

Re: Do I need additional certifications after getting CISSP?

Beads — Tue, 26 Apr 2022 17:25:31 GMT

Well, we get many resumes with the CISSP certification and little if any experience so they get tossed, I am afraid. My shop doesn't put much emphasis on certs themselves and is only used to filter out (one of many) candidates. To be frank, I will say its been years since I even brought up certification during an interview.

What most employers are looking for today are hard, specific skills in security, i.e. Firewall, security appliances, networking and particularly cloud. None of which are covered by the CISSP or any other higher level certificate. This is exactly why you see the words "preferred but not required" near the bottom of many job descriptions.

The CISSP is something most of us take for granted once you have 5 or more years of experience in security but hiring managers have also been largely bitten by the "hiring for certification" mistake as well.

Look for more entry level positions at the SOC or lower level Engineering contributor level and get that experience up to date if you've been out of the workforce for period of time and work your way back up.

Re: Do I need additional certifications after getting CISSP?

Shilpa — Tue, 26 Apr 2022 18:30:50 GMT

I agree completely. It would be ideal to start at the entry level and gradually work your way back up.
The challenge is, findings such entry level opportunities in cybersecurity.

Re: Do I need additional certifications after getting CISSP?

Steve-Wilme — Wed, 27 Apr 2022 08:35:09 GMT

Having the CISSP isn't as relevant if you're applying for hands on cybersecurity roles, as more hands on qualifications would be. The qualifications needed will very much depend on the sorts of positions that you're targeting. Take a look at the site below and select the qualifications from the area most closely related to the career path you're hoping to follow:

https://pauljerimy.com/security-certification-roadmap/

Re: Do I need additional certifications after getting CISSP?

Shilpa — Wed, 27 Apr 2022 13:15:23 GMT

Steve,

This is awesome! I love it!
It gives me a clear idea about the additional certifications and the security domains.
So, instead of random certifications, this leads me to a focused career path.

Thank you so much for sharing!

Shilpa

Re: Do I need additional certifications after getting CISSP?

RRoach — Fri, 29 Apr 2022 12:17:08 GMT

Recommend getting additional certifications if you are actively working in a specific area of technology (e.g. Azure, Amazon, Cisco, MS, blue coat, etc.). However you might just be able to take some CBTs with some experience to get by and later on pursue another certification. As an example I am looking at CISM and PMP to compliment experience and maybe even TCM pentest cert.

Re: Do I need additional certifications after getting CISSP?

Shilpa — Sat, 30 Apr 2022 02:04:50 GMT

Thank you for your recommendation. The cost of getting different certifications is very high. Exam fees, study material are all very expensive. It looks like going back to software development is a better path for me.

Re: Do I need additional certifications after getting CISSP?

minnaked — Fri, 26 Aug 2022 15:05:04 GMT

May I know did you manage to get a security job which you preferred. I did the same thing 14yrs experience in Protocol testing, break to get a master degree, worked hard to get into security domain, last year completed cissp, still trying to figure out how can I maximize my technical and security domain knowledge to get an cross entry into security domain without compromising my exp and salary to run my family.

Re: Do I need additional certifications after getting CISSP?

Shilpa — Mon, 03 Oct 2022 13:50:44 GMT

@minnaked

Sorry for the late reply. I am very happy to say that I did find a suitable position with an amazing organization. They were specifically looking for someone with software experience and CISSP.

For the longest time I kept applying everywhere without any expectations. I hardly heard back from anyone. Then all of a sudden I started getting interviews. Believe it or not, ultimately I had three offers.

If I can get into this field, anyone can. There is so much demand. Looking back, it was not about what I knew or not, but more of a funding cycle issue.

Just hang in there. Everything will work out fine. All the best!

-Shilpa