Apologies if my questions seem a little basic or not meant for a technical forum (Unsure where to post a career related question). I am looking into doing courses and certifications with the aim of becoming certified for penetration testing with a possible specialisation into Wireless and Web Application security.
With this in mind I was looking at the www.giac.org certification roadmap and a little unsure as to which course(s) to plan for. I'll probably self-study and then write the exam for the introductory courses with a view of taking live classes for the more advanced courses.
What I am unsure on is which courses to write the exam for in which order? I assume for Penetration testing I would need the following (In order) or am I repeating course materials in any of these?
GISF: GIAC Information Security Fundamentals GSEC: GIAC Security Essentials GPEN: GIAC Certified Penetration Tester GWAPT: GIAC Web Application Penetration Tester GAWN: GIAC Assessing Wireless Networks
Are any of these unnecessary?
I have already taken the step of purchasing a number of books from amazon on Penetration testing, set up some Virtual Box environments installed with various vulnerable OVAs from the OWASP site and install various, SP1 windows systems.
I've had a play around using Metasploit, nmap, etc to first see if the industry is something I'd be happy with moving into and can say it completely fascinates me and now want to to the certifications formally with a view of possibly getting a job with a team in a few years as a 47 year old (I am 45 now).
Hence my question about the roadmap above, I do not want to spend time on something I will not need as the courseware and exams are quite expensive and I'll be funding this myself.
As a side note, I am currently a senior web and mobile application developer.
Many thanks John