What IT Security Certifications Are Growing As Desired By Employers

[jbacon83]

According to the Cyber Edge group's 2022 Cyber Threat Defense Report, employers interviewed indicated that certifications in cloud security and software security as shown below are in top demand.  These certifications would include the Certified Cloud Security Professional (CCSP) and Certified Software Security Lifecycle Professionals (CSSLP).    According to the trends I've been tracking on Indeed from employer job postings it appears however, the certification trends posted in employer job openings have the CISSP followed by ISACAs Certified Information Systems Auditor (CISA) as the top certifications. CCSP and CSSLP are among the lower ranked advertised certifications for employer job openings.  Maybe the new trend hasn't caught on yet with employer job advertisements?

[emb021]

@nkeaton  well, you went were I wasn't comfortable going.  Years ago I recall seeing sites that laid out the issues with EC-Council.

@riffjim4069 I'd love more info on CompTIA's SecAI+ cert.  I don't see anything on their website.  Hopefully this will be a decent entry level AI security cert, tho I'd like to see something like a "CISSP for AI" if you will,.

I recently went back to the AI Cert website, and now I can't find any info on ANY of their certs being 17024 certified, which is troubling to me.  Am also a bit troubled when I took a look at their experts.  So I wonder how good their stuff really is.

[nkeaton]

@emb021   I agree that is why mentioned Thor's write-up which is very concise but thorough.  He was a CEH that was not renewing for those reasons.  He is well respected, and he spoke to it well.  I am definitely not here to tell tales, but I am honest that we are not creating any new ones for ethics concerns in addition to the costs.  Anyone that wants to know is more than welcome to use a search engine to find that.  I know that there is more historically, but those actions definitely crossed a bad ethical boundary.  

That is really strange and a bit concerning.  

I did look up the beta for SecAI+.  I have taken their betas before.  I did apply but said was not what they were looking for and did not let me sign up.  The link that I used is now a 404, but I searched more and found this:  https://www.comptia.org/en/experts/become-a-subject-matter-expert/workshops/secai-cut-score-workshop...   Not sure what they want for qualifications but might as well see if they accept you for it.  

[riffjim4069]

@emb021 - CompTIA had a SecAI+ Beta Exam webpage, but I'm getting a 404 so it was taken down.  
 
https://www.comptia.org/en-us/experts/become-a-subject-matter-expert/workshops/secai-beta-exam/
 
Regardless, I found it here via the Internet Archive not-so-wayback machine: 

https://web.archive.org/web/20250918101428/https://www.comptia.org/en-us/experts/become-a-subject-ma...
 
Moreover, it looks you download the SecAI+ Draft exam objectives here: 

https://www.comptia.org/en-us/resources/comptia-exam-objectives-under-development/

Cheers. 

[riffjim4069]

@nkeaton - check-out my above post for the link to the Draft SecAI+ exam objectives. 

[nkeaton]

@riffjim4069 Thank you. I had seen the beta signup page a couple of days ago. Yes, it was 404 yesterday. I have done a few of their betas and did apply, but my experience did not meet whatever their requirements are. Since it didn’t say why, I would assume from the questions that was either too much overall experience or not enough AI experience. I did find the page where they are wanting to pay SMEs and posted that. We will see what happens. Years ago they had certifications that were branded Security+, one for iOS and one for Android. Those did not last long. Now that CompTIA is no longer not for profit, I would guess that they will only do things that are profitable. Renaming a couple of their certifications is an interesting start.