Exam fees: US$999; retakes, US$899

Average pay premium: 10%

Market value increase: 25%

Offensive Security Certified Expert (OSCE)

OffSec’s Offensive Security Certified Expert consists of three courses:Advanced Web Attacks and Exploitation,Advanced Evasion Techniques and Breaching Defenses, andWindows User Mode Exploit Development. The format for each course exam is the same: Candidates have 48 hours to compromise a given target using various techniques. No formal prerequisites exist for any of the three courses, though OffSec makes specific knowledge and skill recommendations for each. Candidates who complete the three courses and earn the OSCE also get a challenge coin symbolizing their expertise in offensive security.

Training and exam fees: OffSec bundles each course with a certification exam for US$1,649, so the total cost for OSCE is US$4,947.

Average pay premium: 10%

Market value increase: 25%

AWS Certified Security – Specialty

Given the popularity of AWS, theAWS Certified Security – Specialty may be a wise investment. This vendor-specific certification focuses on data classifications, protection mechanisms, encryption methods, and secure internet protocols within the context of AWS Cloud. The certification is geared toward professionals who need AWS security expertise for roles in cloud architecture, networking, DevSecOps, and other areas. The 170-minute exam consists of 65 questions proctored online or onsite. Amazon recommends five years of IT security experience, two of which involving securing AWS workloads. Many candidates will have already completed AWS Certified Solutions Architect Associate or AWS Certified Solutions Architect before AWS Certified Security – Speciality, according to AWS.

Training fees: AWS offers anofficial practice questions,practice exam, andexam guide for free.

Exam fees: US$300

Average pay premium: 10%

Market value increase: 11%

Certified Information Systems Auditor (CISA)

The Information Systems Audit and Control Association (ISACA)’s  is geared toward IT auditors who wish to upskill or earn a pay boost. According to ISACA, 70% of CISA holders report on-the-job improvement, and another 22% receive a raise. The course covers five domains: IS auditing, implementation, and operations; protection of information assets; and IT governance. Thefour-hour exam consists of 150 multiple-choice questions, and candidates must earn 450 on ISACA’s scaled scoring system, with 800 representing a perfect score. Tomaintain their CISA, certification holders must take 20 CPE credits annually and 120 over three years through conferences, volunteering, on-demand learning, and other methods. To qualify, you must have five years of experience in IT or IS auditing, control, assurance, or security. You can apply for an experience waiver for up to three years.

Training fees: ISACA offers four resources: anonline review course for US$895, anannual subscription to a question bank for US$399, and a print or digitalreview manual for US$139. Discounts are available for ISACA members. 

Exam fees: US$575, members; US$760, non-members

Average pay premium: 10%

Market value increase: 11%

Check Point Certified Security Expert (CCSE)

Check Point Software Technologies’s Certified Security Expert teaches technical professionals who use Check Point’s cybersecurity products how to design, deploy, and upgrade their security environments. Topics include advanced deployments, security monitoring, and performance tuning. The hands-on certification consists of exercises that involve configuring a dedicated log server, customizing threat prevention, and monitoring policy compliance. Check Point offers apractice exam containing a 40-question subset of questions from the exam. The proctored exam is available inEnglish, but its exact configuration is not publicly available. Certificate holders gain access to advanced product documentation and in-house experts, and the credential will always be linked to them, even if they move on from a sponsor organization.

Candidates must have previous training or certification fromCheck Point Certified Security Administrator to qualify for the exam. Candidates should also have knowledge of Unix and Windows, certificate management experience, and system administration and networking, though Check Point does not state how these would be validated.

Training fees: Check Point offers training in various modalities, including instructor-led online and onsite, for US$3,250.

Exam fees: US$250

Average pay premium: 10%

Market value increase: 11%

CompTIA Advanced Security Practitioner (CASP)

CompTIA’s Advanced Security Practitioner, which will be rebranded to SecurityX after Dec. 17, 2024, spans four domains: security architecture, operations, engineering and cryptography, and governance, risk, and compliance. The program is ideal for advanced cybersecurity professionals, such as senior security engineers or architects who wish to progress toward better lateral or vertical opportunities, including CISO. The current 165-minute exam, set to expire upon CASP’s rebranding to SecurityX, consists of 90 multiple-choice and performance-based questions. Certificate holders must renew every three years with 75 continuing education units (CEUs) from CompTIA’s Continuing Education program. The certification carries a significant industry cache: It was developed in partnership with Target, GDIT, RICOH, and ExxonMobil and is approved by the Department of Defense to meet 8140.03M requirements. While there are no enforced prerequisites, CompTIA recommends 10 years of IT experience, with at least 5 years in security.

Exam and training fees: CompTIA offers the exam for US$509. It also bundles the exam with a study guide, exam practice, and retake for US$955, or all those resources plus on-demand content and hands-on lab training for US$1,485.

Average pay premium: 10%

Market value increase: 11%

EC-Council Certified Chief Information Security Officer (C|CISO)

EC-Council has a Certified Chief Information Security Officer certification (C|CISO). The title of the certification may be misleading: It is not designed only for CISOs or those who aspire to that position. The C|CISO materials state that the program is ideal for over two dozen professionals, ranging from CEOs and managing directors to delivery managers and security auditors. Despite this breadth, candidates must still have five years of experience in each of the C|CISO domains, which include governance and risk management, information security core competencies, and more. This experience can overlap, and candidates can substitute some requisite experience with other credentials or advanced degrees. The two-and-a-half-hour exam comprises 150 questions across three levels: knowledge, application, and analysis. The certificate is valid for three years, and candidates must maintain it through continuing education requirements and a US$100 annual fee.

Training fees: EC-Council offers a variety of training modalities, including on-demand, live in-person or online, and group options. The caveat is that interested candidates are invited first to inquire to obtain the price or a quote.

Exam fees: US$100 application fee

Average pay premium: 10%

Market value increase: 11%

EC-Council Certified Cloud Security Engineer (C|CSE)

Candidates for the EC-Council’s Certified Cloud Security Engineer will learn cloud platform security, including modules on cloud storage threats, pen testing, forensics, incident response, and business continuity planning. The program is cloud-agnostic, covering major providers such as AWS, Azure, and Google Cloud Platform, and will detail 44 of the latest technologies. C|CSE is targeted for professionals who deal with cloud administration, management, and operations who must also contribute to its security, such as network analysts, cybersecurity engineers, and cloud administrators. The four-hour C|CSE exam consists of 125 multiple-choice questions, with a 70% pass rate. To qualify for the exam, you must havetwo years of experience in InfoSec or take the EC-Council’s official training course. 

Training fees: C|CSE has avideo course for US$718 and anon-demand course with a virtual lab environment for US$749.

Exam fees: US$100 application fee

Average pay premium: 10%

Market value increase: 11%

EC-Council Certified Threat Intelligence Analyst (C|TIA)

EC-Council’sCertified Threat Intelligence Analyst takes a holistic approach to addressing cyber threats, enabling candidates to identify threats, report on them, mitigate business risks, and implement advanced strategies. It is ideal for those who deal with cyber threats, such as cybersecurity engineers and analysts. The two-hour exam consists of 50 questions acrosseight domains, including threat intelligence, data analysis, and threat hunting and detection; candidates must score 70% to pass. To qualify, you must bean adult as defined by your local jurisdiction and have two years of experience in InfoSec or take EC-Council’s official training.  Minors must have a letter of parental support and be enrolled in an accredited school.

Training fees: C|TIA offers avideo course for US$388 and anon-demand course with lab manual tools for US$250.

Exam fees: US$100 application fee

Average pay premium: 10%

Market value increase: 11%

Google Professional Cloud Security Engineer

Like other certifications from cloud vendors, the Google Professional Cloud Security Engineer certification focuses on Google Cloud Technologies. Candidates will be taught how to secure workloads and infrastructure on Google Cloud through modules focused on access management, data protection, secure communications, operations, and compliance. While there are no formal prerequisites, Google recommends candidates have three years of relevant experience, with at least one involving designing and managing Google Cloud solutions. Offered in both English and Japanese, the exam consists of 50 to 60 multiple-choice and multiple-select questions. Unlike other certifications, recertification for the Google Professional Cloud Security Engineer does not involve CPE. Certificate holders must retake and pass the exam 60 days before its two-year validity ends.  

Training fees: Google provides a 20-activity learning path for security engineers that is free, and candidates need only a Google account to sign up.

Exam fees: US$200 plus applicable taxes

Average pay premium: 10%

Market value increase: 11%