Certification Decision Tool
Is this certification relevant to your route?
Five answers, one call. Everything below is composed from records TechWaymark already holds: the vendor page someone read, TechWaymark's certification intelligence, the public market verdict and the recorded ruling for your target role. There is no score and no ranking.
Free, no account, and nothing you choose here leaves your browser.
Your position
CISSP for SOC Analyst
Limited value for this route
On this route, CISSP buys less than the time and money it costs.
- Wrong altitude. Hiring managers will question why you've got it without ops time.
- By study effort this is a professional level exam and you are earlier than the stage it is usually sat at. That is a sequencing observation, not an entry requirement: effort bands say how much ground the syllabus covers, not who is allowed to book.
- On recruiter recognition this one does the job it is being asked to do.
This is a read on relevance, not a prediction. Nothing here is a guarantee of an interview, an offer or a salary.
UK hiring signal
Finance, defence, large consultancies and the public sector still shortlist on it. Product startups care a lot less. Geography matters.
- Signal strength: High
- TechWaymark's market call: Strong
Practical depth
Senior governance signalling cert. Useful for management lanes, not for hands-on engineering. Hands-on depth is recorded as low.
- Enterprise security breadth
- Governance and risk maturity
- Architecture-literate, not hands-on
- Leadership trajectory
Career-stage fit
By study effort this is a professional level exam and you are earlier than the stage it is usually sat at. That is a sequencing observation, not an entry requirement: effort bands say how much ground the syllabus covers, not who is allowed to book.
- People with five-plus years of security work eyeing a first management or architecture seat
- GRC and security-management track candidates
- Internal movers who want the next salary band to open without changing employer
Eligibility and prerequisites
Nothing here is a hard gate unless the vendor page says so. Recommended experience is the vendor's guidance about comfort with the syllabus, not permission to sit the exam.
- Recorded prerequisite: 5 years of qualifying experience
- Vendor recommended experience, not a bar to booking: Five years of cumulative full-time work across two or more of the eight domains. A relevant degree, or one credential from ISC2's approved list, can cover one of those years.
Route relevance
Wrong altitude. Hiring managers will question why you've got it without ops time. Easiest cyber entry. Saturated by bootcamps, but real shifts thin the field fast.
- Recorded ruling for SOC Analyst: skip
- Basis: explicit TechWaymark ruling
What it cannot compensate for
A certification changes what a filter does with your name. It does not change what you can show a panel.
- Engineering credibility
- Hands-on detection or offensive work
- Anyone with under three years in security. Associate status isn't a job.
- Detection engineers, red teamers and AppSec people. Wrong shape, GCIH, OSEP and CSSLP do more.
- No paid experience yet. The exam will not stand in for the first role.
Opportunity cost
Roughly 200 hours of part-time study for a professional level exam. That is the same block of time as a small piece of work you could show instead, so the comparison is worth making honestly.
- TechWaymark holds more than one figure for this exam (£590 and £630), so no single amount is shown. Take the vendor's published price as the current one.
- Typical study window: 3–6 months
- Validity: 3 years
Better or adjacent, on the record
Only certifications TechWaymark has already ruled useful for this target appear here.
Closer to the actual job than Sec+, alerts, triage, mindset.
Free, vendor-relevant, lands well in the interview.
Microsoft Certified: Security Operations Analyst Associate
Direct fit for Microsoft Sentinel / Defender shops.
Hands-on defensive lab work. Reads as 'has done shifts before'.
Where this comes from
Most recent vendor review recorded: 2026-09.
CISSP (CISSP). Live and unchanged in name. Candidates without the required experience can sit the exam and hold Associate of ISC2 status for six years while they earn it.
Signal, hands-on depth, prerequisites and what the exam does not unlock.
Market-level call "Strong", confidence High. Twenty years of consistent recruiter behaviour in UK enterprise, defence and consultancy. The slow burn is the pattern, not a bug.
Recorded ruling for SOC Analyst.
Vendor pricing moves by region and promotion. Figures are indicative, not quotes.
Keep this with your route
No Route Brief is saved in this browser yet. A brief puts this certification in sequence with everything else the move needs.
Plot a routeRead the full page on CISSP, or compare two exams side by side at cert compare.