B7: Professional Delivery & Capstone
Certification Roadmap: From Junior to Specialist
Choose certs by role: web, AD, exploit dev, cloud, red team, blue team, and leadership.
| Goal | Good direction | Portfolio proof |
|---|---|---|
| Junior pentester | eJPT, PNPT, CPTS, OSCP-style practice | Writeups, lab notes, clean reports. |
| Web specialist | PortSwigger Academy, OSWE-style source review | Bug bounty reports, vulnerable app patches. |
| AD/red team | PNPT/CPTS, CRTO-style labs, Windows/AD depth | AD lab diagrams, detection-aware attack chains. |
| Cloud specialist | AWS/Azure/GCP security certs plus hands-on labs | Cloud threat models and least-privilege remediations. |
| Exploit/RE | CTF pwn/re tracks, reversing courses | Annotated RE notes and safe PoCs. |
| Detection leader | Blue-team certs plus Sigma/YARA/SIEM projects | Detection rules with tests and false-positive notes. |