A recent graduate working as an IT Support Analyst I at a statewide hospital system is leveraging CompTIA certifications to advance a career in cybersecurity. The individual, currently holding a CompTIA A+ certification, is now pursuing the Security+ credential.
The CompTIA Security+ certification validates core skills required for IT security roles, focusing on practical, hands-on abilities to address real-world challenges, according to CompTIA. The certification covers a broad range of security concepts, including general security controls – technical, preventive, managerial, and physical – as well as fundamental principles like confidentiality, integrity, and availability (CIA). It also emphasizes authentication, authorization, and accounting (AAA) protocols, and emerging technologies like zero trust and deception technology.
The path to this position was informed by a prior experience with IT training programs. One individual shared on Reddit that after attending a boot camp covering A+, Network+, and Security+, they focused solely on the Security+ exam. Within two years of passing, they secured a Systems Administrator role with a Department of Defense contractor, which subsequently led to a position as a Cybersecurity Engineer with another DoD contractor.
CompTIA Security+ exam objectives include understanding threat actors and their motivations, such as nation-states, hacktivists, and insider threats, as well as the vulnerabilities they exploit in applications, hardware, and cloud environments. The curriculum also addresses threat vectors like social engineering and supply chain attacks.
The demand for cybersecurity professionals is driving interest in certifications like Security+. Infosec offers a boot camp specifically designed to prepare individuals for the Security+ exam, emphasizing hands-on exercises. CompTIA itself is a non-profit trade organization and the largest vendor-neutral IT certification exam developer globally.
Whereas the A+ certification focuses on entry-level technology support and repair, the Security+ certification is geared towards entry-level cybersecurity professionals. The A+ certification demonstrates knowledge of supporting a hybrid workforce, including remote troubleshooting, cloud technologies, and multiple operating systems. The Security+ certification, however, centers on securing networks, applications, and data.