I have both CCSP and Security+, but my path may be very different than yours. I've been a CISSP-ISSEP type for going on 20-years and, although I was hands-on building, deploying, and managing SOCs for years, my backside mainly sits behind a desk where I'm not allowed to touch-things/break-things for the past decade. I mostly deal with building security programs, security control and architecture frameworks, formulating cybersecurity strategy and IT risk posture, and deal with all the business process owners and people factors - and anything else (dirty jobs) that comes along. LOL!
I studied for the CCSP back in 2016 (purchased the book), but just finally got around taking/passing the exam back in February. I'm very family with Azure, and to a lesser extend AWS, but I mainly define security standards and work to ensure cloud services are property configured and hardened - so I mostly just snoop 'n poop or shoulder surf. Although I wasn't planning on it, I also took the Cloud+ (Beta) exam within a couple days - so I studied for both. The reason I took the Cloud+ was because the only $50 and I already had the Study Guide...so what the heck. There was about 50%-60% overlap in KSA, but the CCSP is focused more on solving cloud security business problems from Cloud Security Architect/Practitioner perspective...whereas the Cloud+ is more from the perspective of the security admins spinning-up and configuring cloud services.
Back to Security+...I took Security+, CySA+, Pentest+, and CASP+ because of some downtime due to Covid plandemic, along with the fact an employer had money to pay the bill - so what the heck. Security+ is a very nice certification for anyone waiting on their 5-years of experience to earn the CISSP. While not the CISSP (Gold Standard IMO) it's highly sought after by HR Tech Recruiters and I recommend it. Does a CISSP, or even a CISM need it? No! But it goes very well paired with the CCSP IMO.
As far as the CCSP goes...I recommend all Security types/CISSPs/Security+ also round-out their portfolio by earning the CCSP or CCSK (CCSP IMO)--platform agnostic--and at least one or two certifications be it Azure, AWS or Google Cloud. Why? There's just too many hybrid environments requiring security folks know both infrastructure AND cloud.
When I joined my organization two years ago, employees ran the network/infrastructure and contractors (@ $350 per hour) ran their Azure/M365 and very small AWS environment...poorly and insecurely I might add. We eventually got rid of our contracted support, and not all of our employees were eager to learn cloud engineering and admin skills...sadly, they were the one's let go when downsized last Fall/Winter. The reality was many of our legacy systems were being reengineered in the Azure cloud, and they didn't use their training funds, learn new skills, and certify within a year so just didn't need them. Here's what recommend (all my staff) to remain highly, and quickly, employable: (Street Cred)
1. Security+/CISSP - don't need both...buy most cybersecurity doors won't open without one)
2. CCSP/CCSK - don't need both, but I strongly advice if you're dealing with cloud issues...which is like everyone)
3. Azure/AWS - I don't care if it's fundamentals...recommend at one in Azure and one in AWS.
I hope this answers your question(s). Again, you don't need Security+ and CISSP (or CASP+ for that matter) but you should one in conjunction with the CCSP/CCSK. Not written in stone, just my two-cents and I've done a lot of hiring over the years.
Also, CompTIA is getting ready to roll-out Xpert Series certifications (e.g., Security+ (Professional)-->which leads to CASP+ being rebranded as SecurityX (Expert), Network+ and Cloud+ (Professional)-->which leads to CloudNetX (Professional).
