What if the best next step after Security+ isn’t another certificate? If you’re wondering what to learn after CompTIA Security+, look beyond a longer list of credentials. Security+ gives you broad foundations, but your next move should build the skills for the cyber security role you want.
Choosing a specialism can feel daunting, especially when job adverts ask for practical experience as well as qualifications. Rather than collecting certificates at random, connect your learning to a target role and practise what you study.
This guide will help you choose a realistic direction, whether you’re drawn to defensive security, penetration testing, cloud security or another area. You’ll see how certifications, hands-on labs and experience can work together, and how to turn job requirements into a focused learning plan. Structured training, such as Square Skills’ Cyber Security Career Path, brings certification study, practical labs and tutor support together. Start with the role you want, then choose the next step that moves you towards it.
Key Takeaways
- Choose what to learn after CompTIA Security+ by starting with the cyber security role you want, not a certificate list.
- Compare defensive security, offensive security and infrastructure-focused paths to identify the skills each role calls for.
- Use real job descriptions to spot whether your next priority is a recognised certification, practical lab work or relevant experience.
- Build a flexible 90-day learning plan around a focused skills gap rather than trying to study everything at once.
- Consider structured training that brings certification study, hands-on labs and tutor support into one guided path.
What should you learn after CompTIA Security+?
Choose your next learning step according to the cyber security work you want to do. CompTIA Security+ gives you a broad grounding in security concepts, but it doesn’t prepare you for every specialist role or tell you which area will suit you best. If you’re weighing up what to learn after CompTIA Security+, begin with the work itself, then identify the skills and evidence employers expect.
A role-led next step after Security+ is focused learning that builds the skills and practical evidence needed for a specific cyber security job. That could mean developing alert-investigation skills for security operations, practising controlled testing for penetration testing, or learning how to protect cloud infrastructure. The wider field covers distinct domains, as the Cybersecurity overview illustrates, so a single follow-on certificate won’t suit everyone.
Start with the role, not another certificate
Security operations, penetration testing and cloud security involve different tasks and suit different technical interests. Before choosing a course, compare several current job descriptions for the role you’re considering. Note recurring responsibilities, tools and skills, then compare them with what you already know. This gives you a clearer starting point than choosing a qualification simply because it appears to be the next rung on a ladder.
- Security operations: Look for duties involving monitoring alerts, analysing suspicious activity and supporting incident response.
- Penetration testing: Check for requirements around assessing vulnerabilities, testing systems with permission and communicating findings.
- Cloud security: Note expectations relating to cloud platforms, identity and access management, and securing infrastructure.
Don’t treat a job title as a complete guide. Employers can use the same title for different work, so compare responsibilities across multiple adverts. Make a short list of recurring requirements and mark each as a strength, a gap to practise or a topic you don’t yet understand. Use that list to guide your next decision.
When is another qualification the right move?
Further certification can be useful when it aligns with your target role and addresses a clear gap. For example, CompTIA CySA+ may be relevant to a defensive security direction, while PenTest+ may suit someone pursuing offensive security. Check current exam objectives with the issuing organisation before planning your study, as certification content and versions can change.
A qualification provides structured study and a way to demonstrate knowledge, but it isn’t the same as applying that knowledge. Pair learning with practical work: investigate sample alerts, document a lab exercise or write up what you found while testing a deliberately vulnerable environment. Keep a brief record of the task, your approach and what you learned. This gives you useful material to discuss in an application or interview.
Use job descriptions to decide what deserves your attention next. If a credential appears repeatedly and you lack the knowledge it covers, focused certification study may be sensible. If you understand the concepts but can’t show how you’d use them, prioritise practice. Neither route guarantees a role, but matching study to a real skills gap makes your effort more purposeful.
Which cyber security learning path fits your target role?
The best answer to what to learn after CompTIA Security+ depends on the work you want to do. A security operations analyst investigates signals of possible threats; a penetration tester assesses systems with explicit permission; an infrastructure-focused professional works on the networks or cloud environments that security depends on.
Your target role should set the direction; choose certifications and practice that build the skills its day-to-day work requires. Use the table as a starting point, not a mandatory sequence. Job titles and requirements vary, so compare current job descriptions before committing to a route.
| Role direction | Useful skills to develop | Study options to explore |
|---|---|---|
| Security operations and detection | Alert triage, log analysis, threat investigation and incident handling | CompTIA CySA+; defensive security labs and documented investigations |
| Penetration testing | Reconnaissance, vulnerability assessment, controlled testing and clear reporting | CompTIA PenTest+; authorised lab exercises and write-ups |
| Network-focused security | Network architecture, configuration, troubleshooting and secure design | Cisco CCNA learning; network labs tied to security scenarios |
| Cloud and infrastructure security | Cloud concepts, identity and access management, and infrastructure protection | AWS Certified Cloud Practitioner learning; practical cloud security exercises |
Security operations and detection
If you like finding patterns and working methodically through evidence, explore security operations. The work can include reviewing alerts, deciding which need investigation, examining security data for signs of suspicious behaviour and recording how an incident was handled. CompTIA CySA+ is one certification to research for this direction, but check its current objectives against the roles you’re targeting. Build practical evidence in legal labs: investigate a sample alert, explain the indicators you noticed and document your reasoning and next steps.
Penetration testing, networks and cloud security
Offensive security may suit you if you enjoy testing how systems behave under pressure. Penetration testing must be authorised and kept within an agreed scope; never test systems without permission. CompTIA PenTest+ is one option to investigate, alongside practice in a controlled lab and clear reporting of findings.
Prefer building and securing the underlying environment? Network-focused study can develop your understanding of how systems connect and where weaknesses may arise. Cisco CCNA learning is one option to explore. For cloud interests, AWS Certified Cloud Practitioner training can help build familiarity with AWS concepts, while hands-on exercises let you apply security ideas to cloud scenarios. Treat both as possible learning components, not proof of specialist security expertise by themselves.
Certification routes extend beyond CompTIA. For example, ISC2 Certifications outlines credentials for different experience and career goals. Research each qualification’s audience and requirements before deciding whether it fits your next step. If you’d benefit from guided progression combining recognised certifications, practical labs and tutor support, explore the Cyber Security Career Path.
Do you need another certification, or more hands-on practice?
The right next step depends on what your target roles ask you to demonstrate. A qualification can structure your learning and assess what you know. Labs let you practise applying concepts, whilst relevant work experience shows how you use them in a real working context. These routes complement one another, but none automatically replaces the others.
Use job descriptions as a diagnostic tool. Review several adverts for the type of role you want and note recurring requirements. If they repeatedly name a qualification you don’t hold, investigate whether it covers a genuine knowledge gap. If they ask for tasks you understand in theory but haven’t performed, prioritise practice. If they emphasise experience, look for appropriate ways to apply your skills through current work, supervised responsibilities or permitted projects.
- Certification study can give you a defined syllabus and a way to demonstrate assessed knowledge. It doesn’t, by itself, show how you approach unfamiliar problems.
- Labs and projects help you practise specific techniques and explain your decisions. They’re most useful when you document your reasoning, not just the tools used.
- Relevant work experience can show how you apply skills in context and communicate with others. It may take time to build, so record suitable responsibilities and learning as you gain them.
So, what to learn after CompTIA Security+ isn’t always another exam. Let the evidence in job adverts guide your choice rather than assuming every employer expects the same post-Security+ certificate.
What further certification study can demonstrate
A relevant qualification can help you study a subject in a structured way, check your understanding and show that you’ve met an assessment standard. Its value depends on how closely its content matches your target work. Before enrolling, review the certification issuer’s current exam objectives, prerequisites and renewal details. Versions and requirements can change. Don’t assume a credential is essential just because it appears in one advert; look for patterns across roles that genuinely interest you.
How to turn lab work into evidence
Make each permitted exercise easy to understand. In a short portfolio note, record the scenario, the environment and rules, your method, your findings and what you’d do differently next time. For example, after investigating a sample alert, describe which evidence you reviewed, how you assessed its significance and what further checks you would recommend. Remove sensitive information and be clear that the exercise took place in a lab.
That explanation demonstrates judgement as well as tool familiarity. Keep notes concise, readable and focused on your decisions; a collection of screenshots without context is less useful to someone assessing your approach. Follow the lab’s rules and stay within its defined environment. Never scan, probe or test a real system unless you have explicit authorisation and a clearly agreed scope. Curiosity is valuable, but responsible boundaries are part of professional practice.
How to build a focused 90-day learning plan after Security+
A short plan can turn a broad career goal into manageable study and practice. Use 90 days as a flexible framework, not a deadline: your available time, starting skills and learning pace will shape how much you can cover. The aim isn’t to guarantee a job or master an entire specialism. It’s to make measurable progress towards one role and decide what to tackle next.
Research the role, close the clearest skills gaps, then review your evidence and set the next milestone. This sequence keeps your effort connected to real job requirements rather than a growing list of unrelated courses.
Weeks 1-4: choose a direction and identify gaps
Start with several current job descriptions for one role direction, such as security operations, penetration testing or cloud security. Note repeated tasks, technologies and qualifications. Separate skills you can already explain from those you’ve only studied in theory and those that are new to you. Keep the gap list short enough to act on; a few priorities are more useful than trying to address every line in every advert.
Next, choose a manageable set of learning objectives. For example, a security operations goal might be to understand how to review an alert, gather relevant evidence and write a clear investigation summary. Decide what will help most: structured certification study for a knowledge gap, authorised lab work for an application gap, or a combination if both matter. Set a realistic schedule around your existing commitments, and specify what you’ll produce as evidence, such as a lab report or study notes.
Weeks 5-12: practise, record and review
Move from planning into consistent action. Block out regular sessions you can maintain, balancing study with practical exercises in permitted lab environments. You don’t need an elaborate project. A focused exercise tied to a job requirement can be more valuable than a large project with no clear purpose. Keep a record of what you attempted, what worked, where you got stuck and what you learned.
- Learn: Work through the selected topic or certification material, guided by the skill gaps you identified.
- Practise: Apply one concept at a time in a legal lab or exercise designed for that purpose.
- Review: Compare your notes with the original job descriptions and identify remaining gaps.
Use the final six days of the 90-day period to review your progress and choose a next milestone. Which tasks can you now explain or demonstrate? Which still need practice? You might continue with the same specialism, revise your study focus or add a relevant qualification. Adjust the plan if work or personal commitments change; consistency matters more than following a timetable perfectly.
Square Skills’ Cyber Security Career Path combines guided study, tutor support and hands-on labs for learners who want a structured route. A clear plan gives you a useful starting point; regular review keeps it aligned with the work you want to do.
Turn Security+ into a structured cyber security career path
Once you’ve chosen a direction, the challenge is making your next steps work together. A recognised qualification can build and validate knowledge; hands-on labs let you practise applying it; tutor support can help you work through questions and maintain momentum. A structured route brings these elements into a clearer progression, rather than leaving you to piece together disconnected courses and exercises.
That structure should still serve your goal. Someone interested in security operations may need different practice from a learner focused on cloud security or penetration testing. Before committing to a learning route, consider how its study and practical work relate to the skills you’re aiming to develop. The question isn’t simply what comes after Security+, but how each next step prepares you for the work you want to pursue.
What structured learning can bring together
Square Skills’ Cyber Security Career Path offers a guided option for learners seeking progression beyond foundational study. It combines training for industry-recognised CompTIA, Cisco and AWS certifications with hands-on labs and tutor support. This gives you a framework for developing knowledge and practising technical skills, with support as you work through learning challenges.
Use a planned curriculum as a map, not a promise that every learner must follow an identical sequence. Keep your chosen role in view: compare course topics with relevant job requirements, and notice where lab work can help you apply a concept. Explore the cyber security career path as a guided route combining these elements.
Prepare for the move from learning to applications
Learning is only part of the progression. You also need to explain clearly what you can do. On your CV, connect relevant skills to evidence: describe a permitted lab project, the task you completed, the approach you took and what you learned. Keep the wording accurate. A lab exercise demonstrates practice in that environment; don’t present it as professional experience if it wasn’t.
A clear LinkedIn profile can reinforce the same story. Highlight relevant study, practical projects and the direction you’re working towards, using specific language rather than broad claims. Square Skills provides CV writing and LinkedIn profile optimisation to help you present your development as you prepare applications.
Square Skills also provides guaranteed job interviews for graduates. An interview is an opportunity to discuss your skills and experience, not a guaranteed job offer or employment outcome. Keep building your evidence and prepare to explain your reasoning, including what you’d improve next time. That combination of learning, practice and clear communication helps make your next step more deliberate.
Ready to turn your Security+ foundation into a focused plan? Explore your next step with Square Skills.
Make your next step count
Your next move doesn’t need to map out your entire career. Choose one role direction, identify the skill you most need to strengthen and take a practical first step. Then use what you learn to refine your plan. Progress comes from making deliberate choices and building on them, not from trying to master every specialism at once.
If you’re still weighing up what to learn after CompTIA Security+, focus on the work you want to be ready for. A clear target makes it easier to judge whether your next effort should be study, practice or preparing to present your skills. You can adjust your route as your interests and experience develop.
Square Skills’ Cyber Security Career Path offers a structured route beyond Security+. Explore your next step with Square Skills and take the first step towards a cyber security career path that fits your goals.
Frequently Asked Questions
Is CompTIA Security+ enough to get a cyber security job?
CompTIA Security+ can establish foundational security knowledge, but whether it’s enough depends on the role and employer. Compare current UK job descriptions for positions you’d genuinely consider, noting requested experience and technical tasks as well as qualifications. If adverts mention investigating alerts, for example, complete a permitted lab exercise and record your analysis. That gives you specific evidence to discuss, without assuming one certificate guarantees a job.
What certification should I take after CompTIA Security+?
If you’re deciding what to learn after CompTIA Security+, start with your target role. CompTIA CySA+ is one option to research for defensive security, whilst PenTest+ may suit learners exploring authorised offensive testing. Before choosing, check the issuer’s current exam objectives and any prerequisites, then compare them with the skills in relevant job adverts. Neither qualification is a universal next step, and practical ability still matters.
Can I learn cyber security without taking another certification?
Yes. You can develop cyber security skills through structured study and authorised practical labs without immediately taking another exam. A credential can still help demonstrate assessed knowledge, particularly if it appears in roles you’re targeting. Look at job descriptions to see what employers request, then choose a lab or project that lets you practise a related task. Keep clear notes on your approach and findings so you can explain what you learned.
Should I learn networking or cloud security after Security+?
Choose according to the work you want to pursue. Networking knowledge can support infrastructure-focused roles, where understanding how systems connect and communicate is useful. Cloud security study may fit better if you want to work on protecting cloud environments. Review relevant job requirements before choosing Cisco or AWS learning, and compare the topics with your current knowledge. Neither route is mandatory for every Security+ holder or every cyber security role.
How long does it take to learn cyber security after Security+?
There’s no fixed timeline. Your prior experience, available study time and chosen skills all affect how quickly you progress. Set a realistic weekly schedule that fits around work and other commitments, then choose a defined objective, such as practising a particular investigation task or learning a cloud security concept. Review your progress regularly and adjust your plan if needed. A set duration can organise study, but it can’t guarantee a job outcome.
Can I go straight from Security+ to penetration testing?
You can start exploring penetration testing after Security+, but build the supporting skills as you go. Focus on networking fundamentals, a repeatable testing methodology and clear explanations of your findings. Practise only in environments designed for training or where you have explicit authorisation and an agreed scope. CompTIA PenTest+ is one study option to consider, not an entry requirement for everyone or a guarantee of employment.
