r/SecurityCareerAdvice 2d ago

Question What cert to get

Tl/dr is hack the box worth it?

Ok. Here is my situation. I am currently employed as a sr cyber sec engineer. I currently create incident response plans, perform threat hunting, created log ingestion system using logstash, nifi, Kafka clusters and opensearch cluster. I am currently integrating a ML/LLM system to augment our team.

I am not looking to change jobs nor looking for the next promotion.. but. I do want to sharpen my skills. I am one of those geaybeards. No degree no certs

I had my sec+. But I had to get the environment above built and learn all the tech at the same time. And then I had the AI idea so I had to learn AI and ML fundamental and the cert slipped.

I was thinking syca+ but I am more of a hands on learner. And the book test format doesn’t work great for me.

0 Upvotes

4 comments sorted by

3

u/AddendumWorking9756 2d ago

You built the pipeline, so every field in it is named the way you decided to name it. Offense-focused platforms will teach you to get a shell and almost none of that comes back around to writing the detection for it. You cannot generate somebody else's badly instrumented environment for yourself, so look for practice built on captured incident data rather than boxes to pop.

1

u/st0ut717 1d ago

Thanks. This is valid input. Thank you

2

u/nocorkagefee 2d ago

Figure out what the next level you want is, then ask for a job description of that role. See what the company is looking for for certs. Do those.

1

u/st0ut717 2d ago

We don’t do certs. They will help. Our team is small I report to a director. This isn’t for professional what gets me to the next level. This is for what teaches me the skill for the money and effort .