35. Careers, Certifications and Bug Bounty
35.2 Certifications Roadmap
Certifications help clear HR filters, but only when backed by skill. Prices change often and differ by region, so check the official website of each body before paying.
| Level | Certification (body) | Good for |
|---|---|---|
| Foundation | CompTIA Security+ | Broad security basics; widely recognised for entry roles |
| Foundation | ISC2 Certified in Cybersecurity (CC) | Beginner-level concepts |
| Foundation | Google Cybersecurity Certificate (Coursera) | Beginner SOC-style foundations |
| Foundation | AWS Certified Cloud Practitioner | Cloud basics before cloud security |
| Hands-on entry | eJPT (INE) | Practical junior penetration testing |
| Intermediate | CEH (EC-Council) | Common in Indian job postings for VAPT roles; theory plus a practical option |
| Intermediate | CompTIA CySA+ | SOC and security analyst work |
| Intermediate | PNPT (TCM Security) | Practical pentest with a report |
| Advanced | OSCP (OffSec) | Highly respected hands-on penetration testing exam |
| Cloud | AWS Certified Security – Specialty | Cloud security engineer roles |
| Management | CISSP (ISC2) | Senior roles; requires paid professional security experience |
| Management | ISO/IEC 27001 Lead Auditor / Implementer | GRC and audit roles |
A sensible order for learners of this book: networking and Linux skill, then Security+ or an equivalent foundation, then eJPT or CEH with lots of lab practice, then OSCP or AWS Security Specialty depending on whether you choose offensive or cloud.
Ravindra Bagale's Tip
"Konta certificate ghetla ki job pakka?" – asa koni certificate nahi. Interviewer vichartat "he kasa kela te dakhva". Certificate darwaja ughadto, pan skill ani lab cha proof job milavto. Aani fake "100% placement" wale shortcut courses pasun savadh raha.
Practice task
Choose one target role and write your own 6-month certification and practice plan: which certificate first, which labs every week, and which chapters of this book to revise. Check the current exam objectives on the official website of your first certification.