Cybersecurity

Security is the best-paid entry point in IT and the one with the most misleading marketing around it. This covers the credential employers actually name, what it costs, how long preparation takes, and the honest version of what an entry-level security job involves.

For information and self-assessment only, to help you prepare. Always refer to the official certifying body's own materials and content outline as the source of record.

Official body: CompTIA ↗ — publisher of Security+, the common entry credential; ISC2 publishes the CC certification as an alternative starting point

Typical cost: $400–$800; Range reviewed 2026-08-05. Confirm current fees with the certifying body.
Typical prep time: 10–20 weeks; Varies widely with prior experience.
Certifying body: CompTIA

What the entry certification is

CompTIA Security+ is the credential most commonly named in entry-level security listings, partly because it satisfies a US Department of Defense baseline requirement, which makes it a hard filter for a large category of jobs. ISC2 offers Certified in Cybersecurity as an alternative starting point. Both are broad rather than specialised, which is appropriate: entry-level security work is broad.

The honest version of the job

Most entry security roles are analyst positions in a security operations centre: triaging alerts, investigating whether something is a real incident, and escalating. It is closer to disciplined investigation than to the adversarial work the field is marketed on. People who enjoy the troubleshooting method from support work usually enjoy this; people expecting constant intrusion testing usually do not.

Why experience is usually expected first

Security roles generally assume you already understand what normal looks like, which is why most people arrive via support or networking rather than directly. The certification opens the door; the year or two of infrastructure experience is what makes the alerts mean anything. Treating security as a first job rather than a second one is the commonest planning mistake in this field.

Where it leads

SOC analyst (tier 1)
Alert triage and initial investigation, often on shifts. High volume, and the fastest way to learn what normal and abnormal actually look like on a real network.
Security analyst (tier 2) / incident responder
Deeper investigation, containment, and root-cause work. The point at which the job starts requiring judgement rather than procedure.
Security engineer or specialist
Building and tuning the defences rather than watching them. Branches toward cloud security, application security, threat intelligence, or governance.

Not sure you are ready?

Take the free practice test for this field — 25+ original questions, scored instantly, with a per-topic breakdown showing where the gaps are.

Take the cybersecurity practice test →

Or compare ways to study for it

Frequently asked questions

Can I get a security job with no IT experience?

It happens, but it is the exception rather than the path. Most entry security roles assume you can already tell normal from abnormal on a network, which usually comes from support or networking work first. The certification is rarely the binding constraint; the experience is.

Is Security+ enough on its own?

It is enough to be considered for many entry roles, especially where the DoD baseline applies. It is rarely enough on its own without some infrastructure background, and the people who struggle are usually those treating it as a shortcut past that background rather than a complement to it.

What about the free ISC2 certification?

ISC2 has periodically offered Certified in Cybersecurity free through an outreach programme, which makes it a low-risk way to test whether the field suits you. Check their site for current terms — offers of this kind change, and ours is not the page to trust for what is available today.

Do I need to learn to code?

Not for most entry roles, though scripting becomes valuable quickly. Being able to read a script and automate a repetitive investigation step separates analysts who scale from those who do not, and Python is the usual first choice because so much tooling already speaks it.

The free study kit: schedule template, exam-day checklist, grade tracker

One email when the numbers change. Double opt-in, no spam, unsubscribe anytime.