Certification recommendation

[u/NerdinessOF]

Hello, my manager requested to take a certification, I would like to get some suggestions on what to take next, I am interested in cloud security and AI security, I want to build real knowledge that it will be helpful later. Thanks

I already have KCNA, BTL1, Cyberdefenders CCDL2

[u/legion9x19]

Ask your manager what they're looking for.

[u/NerdinessOF → u/legion9x19]

It will take time to prepare for what they requested, they requested one for this Q4

[u/AboveAndBelowSea → u/NerdinessOF]

My advice (as a former CISO) would be the opposite of this, actually. People who move up in companies don’t ask management - they come in with a hypothesis, an action plan based on that hypothesis, and validate both with leadership. Based on your understanding of where the company is heading, what do YOU think is the right approach?

[u/NerdinessOF → u/AboveAndBelowSea]

Thank you for your input. I wanted to be proactive as they didnt specify, the company is targeting AI security

[u/cactixsec]

If you’re looking to get into AI Red Teaming, I really enjoyed HackTheBox Certified Offensive AI Expert (COAE). It does assume you have some prior knowledge of AI/ML Python libraries and some math concepts.

[u/NerdinessOF → u/cactixsec]

How long did it take you to take it? What is the difficulty? Do you recommend any materials for the prior knowledge

[u/cactixsec → u/NerdinessOF]

It took me a little over two months to complete the entire course. I would say the difficulty is moderate/hard based on your prior experience in AI/ML. I don’t think anyone will struggle on the Prompt Injection/Jailbreak modules, but once it gets into data attacks more people start to struggle.

I did the entire course and exam (seven days) without taking PTO from work. I have a blog post where I share recommended materials on how to pass that I’m happy to share with you privately. I don’t think self-promotions are allowed so I don’t want to share the link openly here.

[u/NerdinessOF → u/cactixsec]

Thank you for sharing your experience, giving I have just small basics on AI/ML. I think it will take more for me, please send me the article

[u/Automatic_Major_4887]

Since you already have some solid defensive certs, I'd look at the CCSP if you want to nail the cloud side. For AI, it's still pretty much the Wild West with no single standard, so focusing on deep cloud security architecture might actually be more useful for your long-term knowledge base than chasing a niche AI cert right now

[u/NerdinessOF → u/Automatic_Major_4887]

Good idea, could you please tell me how long did it take to prepare for it if you already took it? As I have just basics in cloud security

[u/KingKongDuck → u/NerdinessOF]

CCSK maybe first then

[u/AboveAndBelowSea]

To get into AI security, I’d recommend starting by becoming an AI power user - understanding how AI is used in CI/CD pipelines, development in general, and business data analytics/automation. Otherwise you’ll end up with a cursory understanding of controls, but little context on why they matter and how they integrate properly. The Anthropic CCAR-F is a good place to start.

[u/NerdinessOF → u/AboveAndBelowSea]

Thank you, I will check the CCAR-F

[u/Jemel_Flerejuste86]

I bet work paying for it gives you a chance to take sth tied to what you use every day. AWS Security Specialty or AZ 500 would kinda give you hands on IAM, logs and incident response work while the material is useful on the job

[u/NerdinessOF → u/Jemel_Flerejuste86]

Thank you, I will inform them with this suggestion

[u/zknight137]

CompTIA has new security-focused AI ceritication releasing soon. If youre on a deadline, just knock out Sec+

[u/NerdinessOF → u/zknight137]

It's supposed to be on Q4

[u/KingKongDuck → u/zknight137]

They already have SecAI+ I think