An important thing to remember is that you rarely need a cybersecurity certification or degree to do a job, but you will need a certification or degree to get a cybersecurity job in the first place. A certification or a degree will help get you noticed for an interview, but you must demonstrate your ability to apply the theory in a practical way in order to land the job. Getting a certification and/or a degree is a great place to start, but when possible you should augment this learning with skills-based training.

Certification or Degree? As with all questions about cybersecurity, it depends on your personal circumstance:

• Do you have previous experience working in an IT field?
• How much time do you have to commit to study?
• How much time do you have to land your next job?
• How much can you afford to pay for the learning program?
• Do you prefer to be self-taught or learn in a group setting?
• Do you already work in security, but are looking to learn a new skill?
• Do you plan to get a degree regardless of your cybersecurity role?
• Do you plan to be in management one day?
• Do you already have a degree in some other discipline?

There are benefits and drawbacks to each option.  Understanding your own needs will help you choose the best option for you.

Here are some common career goals, and a potential answer to the choice of certifications or degrees:

• Goal: Land an entry-level cybersecurity job as quickly as possible
  • An entry-level certification is the fastest and cheapest way to go. 
• Goal: Develop skills in a certain functional area (such as Ethical Hacking, for example)
  • Mid-level certifications can give you the basics
  • HOWEVER you would learn more in a degree program or industry boot camp (which may also offer a certification).
• Goal: To get a degree regardless of landing a job
  • Choose a cybersecurity or computer science degree
• Goal: To advance into management later in your career
  • Choose a graduate-level cybersecurity degree. 
• Goal: You already have a degree in a non-related field, and wish to pivot mid-career into cybersecurity
  • A certification is a great way to do this
  • Maybe a post-graduate cybersecurity professional certificate at a later date.

Entry-level certifications require seekers to pass an exam but do not require years of professional experience.  This means that for most seekers this is the fastest path to having a cybersecurity credential that can be used on a resume to land a cybersecurity job.  Note that hiring managers view certifications as a credential that shows a seeker has interest, and basic understanding, but not necessarily mastery of a cybersecurity skill. As a result, hiring managers have a preference for on-the-job skills development, in addition to theoretical learning.

Some people attend cybersecurity bootcamps to get their credentials.  General cybersecurity bootcamps typically last anywhere from 8 to 16 weeks, and cover IT and/or cyber basics.  Many include certifications as part of the curriculum.  Bootcamps can be more expensive, per hour, than a degree, but have a shorter time to completion.  Bootcamps also typically offer hands-on skills-based learning, which is better than getting a  If this is the path you choose, look for training methods that offer skills-based training (cyber ranges, capture the flag competitions, job shadowing, etc.) or find ways to practice these skills as you learn them (consider building a home lab).  That way, you will earn the credential AND be able to demonstrate to a hiring manager that you know how to apply the concepts you have learned in a live environment. Bootcamps also typically offer hands-on skills-based learning, which is better than getting a  certification by self-paced learning alone. Some bootcamps also offer job-placement support, which can be useful if you have a limited personal network.  Be sure to investigate both the graduation rate and the job-placement rate for bootcamp participants.

Alternatively, there are two-year cybersecurity degrees, available via community colleges. These tend to be more hands-on, practical in nature, and focused on graduates who are “workforce ready”.  Many community colleges include industry certifications as part of their curriculum. These programs are also often aligned to local employers who will specifically hire graduates, or offer internships for students. Some also have transfer programs with four-year colleges, to allow students to continue on to a bachelor’s degree.

Four-year programs offered by universities include a full general education component as well as deeper theoretical exploration of cybersecurity topics.  Graduates can enter the workforce as security operators, but also can become deep subject-matter experts for cybersecurity research.  Some programs include certifications or internships as part of their program – seekers should inquire whether certifications are included when making a school choice. Getting a degree takes longer, and costs more, than a certification, but may assist if a seeker has aspirations of management. For those considering a career in governance, risk and compliance, a four-year program can lead to graduate programs such as law, business or policy.

Regardless of whether you choose a certification, bootcamp, or a degree as your learning path, look for options that follow a “skills-based” learning method.  That is, find ways to practice the functional areas covered by the certification using cyber ranges, capture-the-flag activities, or other hands-on methodologies.  Even better if the program includes internships or other on-the-job training. And don’t forget about networking.  Studying for a certification in a group setting is a great way to build a network and learn from others and to learn of job openings.

If possible, the answer to the “certification or degree?” question is “both”.  Certifications can be targeted, faster and cheaper than degrees, but for a long term career there are benefits to pursuing a degree as well.  If you have the time and resources to consider a degree, look for one that includes industry certifications as part of the program.  If a degree is not in your future, choosing a certification is a necessary tool in your career toolbox.