INFOSEC CERTIFICATIONS


Certifications validate expertise in your chosen career: Pentesting, Forensics, Management, among others.

Choosing your path soon, assures you have professional success in the field of your choice. There are several certifying organizations, each one of them has its requirements for certification maintenance and some require not only continuing education credits but also periodic payments, for which I recommend to review the equivalent certifications according to your personal interest before choosing one.

  • EC-Council
    • CND - Certified Network Defender
    • CEH - Certified Ethical Hacker
    • CTIA - Certified ThreCASE-Java - Certified Application Security Engineerat Intelligence Analyst
    • ECSA - EC-Council Certified Security Analyst
    • APT - Advanced Penetration Testing
    • LPT-Master - Licensed Penetration Tester
    • ECIH - EC-Council Certified Incident Handler
    • CHFI - Computer Hacking Forensic Investigator
    • CCISO - Certified Chief Information Security Officer
    • CNDA - Certified Network Denfense Architect
    • ECES - EC-Council Certified Encryption Specialist
    • CSCU - Certified Secure Computer User
    • CASE-Java - Certified Application Security Engineer
    • CASE-.Net - Certified Application Security Engineer
    • ECSS - EC-Council Certified Security Specialist
    • EDRP - EC-Council Disaster Recovery Professional
    • Advance Network Defense CAST614
  • ISACA
    • CISA - Certified Information Systems Auditor
    • CRISC - Certified in Risk and Information Systems Control
    • CISM - Certified Information Security Manager
    • CGEIT - Certified in the Governance of Enterprise IT
    • CSXP - Cybersecurity Nexus - CSX Certificate and CSXP Certification
  • ISC2
    • CISSP - Certified Information Systems Security Professional
    • SSCP - Systems Security Certified Practitioner
    • CCSP - Certified Cloud Security Professional
    • CAP - Certified Authorization Professional - under the DoD8570 mandate
    • CSSLP - Certified Secure Software Lifecycle Professional
    • HCISSP - Healthcare Information Security and Privacy Practitioner
    • CISSP Concentrations
      • ISSAP - Information Systems Security Architecture Professional
      • ISSEP - Information Systems Security Engineering Professional
      • ISSMP - Information Systems Security Management Professional
  • GIAC
    • Cyber Defense
      • GSEC - GIAC Security Essentials Certification
      • GCIA - GIAC Certified Intrusion Analyst
      • GISF - GIAC Information Security Fundamentals
      • GCED - GIAC Certified Enterprise Defender
      • GCWN - GIAC Certified Windows Security Administrator
      • GMON - GIAC Continuous Monitoring Certification
      • GPPA - GIAC Certified Perimeter Protection Analyst
      • GCCC - GIAC Critical Controls Certification
      • GCUX - GIAC Certified UNIX Security Administrator
      • GCDA - GIAC Certified Detection Analyst
      • GDAT - GIAC Defending Advanced Threats
      • GDSA - GIAC Defensible Security Architecture
    • Penetration Testing
      • GCIH - GIAC Certified Incident Handler
      • GPEN - GIAC Certified Penetration Tester
      • GWAPT - GIAC Web Application Penetration Tester
      • GXPN - GIAC Exploit Researcher and Advanced Penetration Tester
      • GMOB - GIAC Mobile Device Security Analyst
      • GAWN - GIAC Assessing and Auditing Wireless Networks
      • GPYC - GIAC Python Coder
    • Incident Response and Forensics
      • GCFA - GIAC Certified Forensic Analyst
      • GCFE - GIAC Certified Forensic Examiner
      • GREM - GIAC Reverse Engineering Malware
      • GNFA - GIAC Network Forensic Analyst
      • GCTI - GIAC Cyber Threat Intelligence
      • GASF - GIAC Advanced Smartphone Forensics
    • Management, Audit, Legal
      • GSLC - GIAC Security Leadership Certification
      • GSNA - GIAC Systems and Network Auditor
      • GISP - GIAC Information Security Professional
      • GLEG - GIAC Law of Data Security and Investigations
      • GSTRT - GIAC Strategic Planning, Policy, and Leadership
      • GCPM - GIAC Certified Project Manager
    • Developer
      • GSSP-JAVA - GIAC Secure Software Programmer-Java
      • GWEB - GIAC Certified Web Application Defender
      • GSSP-.NET - GIAC Secure Software Programmer-.NET
    • Industrial Control Systems
      • GICSP - GIAC Industrial Cyber Security Professional
      • GRID - GIAC Response and Industrial Defense
      • GCIP - GIAC Critical Infrastructure Protection
  • IACRB
    • CPT - Certified Penetration Tester
    • CEPT - Certified Expert Penetration Tester
    • CSSA - Certified SCADA Security Analyst
    • CREA - Certified Reverse Engineering Analyst
    • CDRP - Certified Data Recovery Professional
    • CCFE - Certified Computer Forensics Examiner
    • CASS - Certified Application Security Specialist
    • CSAP - Certified Security Awareness Practitioner
    • CCTHP - Certified Cyber Threat Hunting Professional
    • CRTOP - Certified Red Team Operations Professional
  • OFFENSIVE SECURITY
    • OSCP - Offensive Security Certified Professional: Penetration Testing with Kali Linux course and passing the 24-hour performance-based, online security test
    • OSCE - Offensive Security Certified Expert: Cracking the Perimeter (CTP) advanced penetration testing course and successfully passing the challenging 48-hour online exam
    • OSWP - Offensive Security Wireless Professional: WiFi security issues with wireless network deployments and how to compromise them in the real world
    • OSWE - Offensive Security Web Expert: Web application vulnerabilities and the real-world risks of compromise and impacts
  • MILE2
    • Security Awareness
      • Fundamental: C)SA1 - Certified Security Awareness 1
      • Foundational: C)SA2 - Certified Security Awareness 2
    • IS Management Leadership
      • Fundamental: C)SP - Certified Security Principles
      • Foundational: C)ISSO - Certified Information Systems Security Officer
      • Specialized: IS20 Controls - IS 20 Controls
      • Advanced: C)SLO - Certified Security Leadership
    • Pen Testing & Hacking
      • Fundamental: C)VA - Certified Vulnerability Assesor
      • Foundational: C)PEH - Certified Professional Ethical Hacker
      • Specialized: C)PTE - Certified Penetration Testing Engineer
      • Advanced:
        • C)PTC - Certified Penetration Testing Consultant
        • C)PSH - Certified Powrshell Hacker
    • Incident Handling
      • Fundamental: C)SP - Certified Security Principles
      • Foundational: C)ISSO - Certified Information Systems Security Officer
      • Specialized: C)IHE - Certified Incident Handling Engineer
    • Forensics
      • Fundamental: C)SP - Certified Security Principles
      • Foundational: C)DFE - Certified Digital Forensics Examiner
      • Specialized: C)VFE - Certified Virtual Forensics Examiner
      • Advanced: C)NFE - Certified Network Forensics Engineer
    • Disaster Recovery
      • Fundamental: C)SP - Certified Security Principles
      • Foundational: C)ISSO - Certified Information Systems Security Officer
      • Specialized: C)DRE - Certified Disaster Recovery Engineer
    • Healthcare
      • Fundamental: C)SP - Certified Security Principles
      • Foundational: C)ISSO - Certified Information Systems Security Officer
      • Specialized: C)HISSP - Certified Health Information Systems Security Practitioner
    • Auditing
      • Fundamental: C)SP - Certified Security Principles
      • Foundational: C)ISSO - Certified Information Systems Security Officer
      • Specialized:
        • C)ISMS-LA - Certified Information Security Management Systems - Lead Auditor
        • C)ISMS-LI - Certified Information Security Management Systems - Lead Implementer
      • Advanced: C)ISSA - Certified Information Systems Security Auditor
    • Application & Secure Code
      • Fundamental: C)SP - Certified Security Principles
      • Foundational: C)ISSO - Certified Information Systems Security Officer
      • Specialized: C)SWAE - Certified Secure Web Aplication Engineer
    • Cloud Security
      • Fundamental: C)VCP - Certified Virtualization Cloud Principles
      • Foundational: C)VE - Certified Virtualization Engineer
      • Specialized: C)CSO - Certified Cloud Security Officer
    • Virtualization
      • Fundamental: C)VCP - Certified Virtualization Cloud Principles
      • Foundational: C)VE - Certified Virtualization Engineer
      • Specialized: C)VSE - Certified Virtualization Systems Engineer
    • IS Management Electives
      • Fundamental: C)ISSM - Certified Information Systems Security Manager
      • Foundational: C)ISRM - Certified Information Systems Risk Manager
      • Specialized: I SCAP Information Systems Certification & Accreditation Professional
      • Advanced: C)ISS - Certified IPv6 Security Specialist
    • Cyber Warfare
      • Fundamental: Red VS Blue 1
      • Foundational: Red VS Blue 2