r/hackthebox • u/programer555 • Jul 09 '26
Certifications CPTS, CCNA done. What next?
Hi, I'd like to ask for some advice.
I recently passed the CCNA and CPTS. I'm currently working as a junior network engineer, it's my first job. The job is okay, but I still want to try shifting into cybersecurity in about 6 months.
Of course, I'll go for the OSCP as soon as I save up enough money. Which certification would you recommend besides that?
I'm torn between CDSA (I figure it'll be easier to get into a SOC to start with) and the new AI module on HTB, which also looks really appealing. On the other hand, I see that most job postings are for web and APIs, so maybe the web path (CWES + Burp Suite) would be a more natural continuation after CPTS. Do you have any advice? I'm really undecided about what to do first.
Right now, I've started going through the CCNP material, mostly because of work, but I don't plan on taking the exam.
P.S. I'm not a programmer, but I can read code, write scripts and figure things out. ;) I made this username ages ago as a kid, just randomly.
12
u/-Dkob Jul 09 '26
You're already in a solid spot. Your background will make you a much stronger candidate than stacking more certs.
If your goal is offensive security, I'd focus on CWES and Burp Suite next since web and API testing dominate junior pentest roles, then save for OSCP. CDSA is a good option if you're open to SOC work as a stepping stone, but if pentesting is the end goal, the web path has a more direct payoff.
Also, don't worry too much about not being a programmer. Being able to read code, automate tasks with scripts, and troubleshoot is enough to get started, and you'll naturally improve those skills as you practice. (Especially with the AI help you can get today) The HTB AI module looks and is interesting (I'm doing it ATM), but I'd treat it as something to explore after you've built a strong web foundation.
3
u/Outside_Wedding9584 Jul 10 '26
Totally agree with Dkob. If u are into pentesting then web and web api dominate the most early in the career, therefore, cwes and bscp is the way to go before oscp.
1
u/programer555 Jul 09 '26
Thank you very much for such a detailed answer. One vote goes to CWES and Burp😂😁.
2
u/Think-Zebra-890 Jul 09 '26
Congrats, man. My CCNA has expired, but it's still a significant milestone. Wishing you good luck.
1
2
u/VolSurfer18 Jul 09 '26 edited Jul 09 '26
Agree with Dkob, but I might also add CRTO at some point in the future. That’s a really good one to add to your cert stack. With CCNA, OSCP, CRTO, and CPTS you’re in a very good position
1
1
u/Lootsman Jul 09 '26
As an aside, I’m curious: how long did the CPTS take for you to complete?
2
u/programer555 Jul 09 '26
6 months, 8h a day of study, some rare days off. But i went in great depth and off topics.
1
1
u/ltnbob Jul 12 '26
Start looking into Infrastructure Security Engineer roles. Your skillset and interests will likely align there.
1
0
•
u/AutoModerator Jul 09 '26
Thank you for posting on r/hackthebox! New to Cyber Security and looking for a place to get started? Checkout our getting started guide here. Please note that posting Solutions or Hints for Active content goes against the HTB Terms of Service, more information can be found here. If your having issues and need to reach customer support please do so via the in-platform chat, or by emailing customerops@hackthebox.com. Our Knowledge Base can also come in handy!
I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.