Security Certification Roadmap
Security credentials fall into a few families. Choose by whether you defend clusters, clouds, or organisations.
Cloud-native and Linux
| Certification | Focus |
| KCSA: Kubernetes and Cloud Native Security Associate | Concepts and threat models |
| CKS: Certified Kubernetes Security Specialist | Hands-on cluster hardening (requires a current CKA) |
| Red Hat Certified Specialist in Security: Linux (EX415) | Hardening and compliance on RHEL |
Cloud provider
| Certification | Provider |
| Security Specialty | AWS |
| Professional Cloud Security Engineer | Google Cloud |
| SC-200 and SC-500 | Microsoft |
Vendor-neutral
| Certification | Level and focus |
| CompTIA Security+ | Entry level, broad foundation |
| ISC2 CC | Entry level, newcomers to the field |
| CISSP | Experienced practitioners and managers (requires several years of experience) |
| CCSP | Cloud security architecture and operations |
| CISM | Security management and governance |
| OSCP | Hands-on offensive security |
A cloud-native security path
- KCSA for concepts.
- CKS for hands-on hardening.
- A cloud security specialty for your main provider.
- CCSP or CISSP once you have the experience, to broaden into architecture and governance.
Related topics on this site: Cluster Hardening and Network Policies.