OSCP certification for junior pen tester position any good?

Question

Currently finishing my degree in computer security and have a few years experience in IT support and want to get into a junior pen testing job or similar.

Would the OSCP certification do me any favours, does it carry any weight? Is it recognised by companies in the UK? From what I've read the OSCP seems to be the most enjoyable and actually involves using your brain while the others are mostly read book pick multiple choice question.

Really what else can I do to improve my chances of getting a job interview, I've got a home lab that I experiment with bar that and my degree iv not got experience.

Answer 1

OSCP is recognized in infosec. Others include CEH and the myriad of SANS certs (SANS certs probably have better brand awareness in general). Though certs are nice to have and may open doors (only with HR), experience is more important than pure certs. In other words, if you want to work with an "elite" group of pentesters, certs may not carry much weight. However, if you want to work for an organization that "churns and burns" pen testers, having an OSCP may get you the job.

If anything, consider actively participating in the infosec community. Security conferences are always looking for volunteers and volunteering offers you the chance to learn important concepts and industry trends for a low (or no cost) and can give you chance encounters with key people in the community. Infosec europe just rolled through London but there are plenty of other groups/conferences that you can attend.

Answer 2

As long as you understand what a certification is for. The training for the OSCP is what you really want. The paper at the end is simply a trophy.

As I have said before, it's not the certs you have but it's what you have done that counts. If you can explain in a single sentence how you have accomplished a task in the past, then that is more valuable than the cert. The PWB class can help you get that experience and give you the tools to gain even more.

My advice: get the training and get the cert. Put it on a resume, but focus your resume instead on what you have done, in practical terms. After the course is done, continue to take on new skills, learn one new tool or technique every week, and participate in the security community.

Certifications can get your foot in the door of opportunities to work with the pros in the field and work with them. Leverage it, and your own skills, to be able to take on new challenges.

Good luck!

Answer 3

In the UK yes, OSCP is the way to go in my opinion, it is well recognised within the industry because the exam is hands on, the labs are great too.

The real "must have" certifications for UK pen testers are CREST and CHECK certifications though, but they are aimed at pen testers experience and for CHECK you need to have security clearance.

Start with OSCP and go slow, learn everything you can from the course and it will serve as a really good introduction to finding and exploiting vulnerabilities. Also be sure to learn operating systems administration at a good level, this is important because a lot of penetration testing is performing actions of normal users or administrators but with intent to reach a specific goal such as stealing information.