
AH-003: After Hours in the GhostShell — Are Cyber Certs Still Worth It? (20 Sep 2026)
Source: YouTube · HaxrByte · published Sep 21, 2026 · 1:08:09
BLUF: While professional penetration testing certifications hold little weight for hiring managers who prioritize practical skills, foundational certifications like Security+ and CCNA are critical for entry-level hiring and technical credibility. 0:48
Key Takeaways:
• Professional pentesting certifications are largely dismissed by hiring managers as they cannot validate actual hacking ability, which is tested via practical interviews instead. 4:50
• Security+ remains valuable for beginners to learn the necessary "security vernacular" and communication skills required to be taken seriously in the industry. 13:30
• Networking knowledge, often validated by CCNA, is an indispensable foundation for all cybersecurity roles, including cloud and web application testing. 16:20
• Certifications rarely lead to immediate salary increases and should be viewed as tools for validation or HR filtering rather than direct financial returns. 23:00
• During interviews, candidates must be prepared to defend their findings and demonstrate ethical integrity, as honesty is prioritized over perfect answers. 49:30
Closing Statement:
Success in cybersecurity depends less on collecting badges and more on demonstrating deep architectural understanding, strong networking fundamentals, and the ability to communicate technical risks effectively to stakeholders.
Sources:
- 0:48 Discussion on the lack of value in professional penetration testing certifications.
- 13:30 Explanation of Security+ value for learning security communication.
- 16:20 Emphasis on the critical importance of networking knowledge for pentesters.
- 23:00 Reality check regarding certifications and salary expectations.
- 49:30 Interview advice focusing on ethical scenarios and honesty.
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 1 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
Hi, welcome. Uh tonight we are asking uh we're asking whether cyber security certifications are still worth your time and we're going to break down what actually happens in the real world and we want your opinion as well. So please remember to put those those in the chat. Uh so welcome. This is the the after hours go shell. Uh and um yeah, this is our weekly cyber security discussion and I'm Hexabyte and I'm joined by Tom at Pentest TV. Uh we are live every Sunday at 7 p.m. Uh over to you Tom. >> Yeah, you're Yeah. Okay. I didn't know if I was still muted or not. Yeah. So Tom Wilhelm. Uh I'm a manager of a fortune 25 company of a pentesting team and then uh I've been in the industry for over 20 years doing offensive security for over [music] 30 and then uh I've written multiple books uh ov…