From CertNexus

CFR: CyberSec First Responder
CFR certification is sponsored by CertNexus. CFR certification confirms the knowledge, skills, and abilities required to deal with a changing threat landscape. This with this credential are able to assess risk and vulnerabilities, acquire data, perform analysis, continuously communicate, determine scope, recommend remediation actions, and accurately report results. This credential is primarily for cybersecurity practitioners plus an ideal certification for those working for or contracting with the federal government as it is a DoD 8140 approved work role certification.
More on CFR

From Cisco

CCNA
CCNA validates skills and knowledge in network fundamentals, network access, IP connectivity, IP services, security fundamentals, and automation and programmability to maintain security. (CCNA exam 200-301 replaced CCNA Security certification.)
More about CCNA certification

From CompTIA

CompTIA recommends those lacking foundational IT skills take CompTIA A+ and Network+ prior to cybersecurity training.

Security+
CompTIA Security+ is a globally-recognized certification that validates the baseline skills necessary to perform core security functions and pursue an IT security career. Security+ validates knowledge of communication security, infrastructure security, cryptography, operational security, troubleshooting and general security concepts. Earning Security+ certification ensures candidates have practical security problem-solving skills and it provides a springboard to intermediate-level cybersecurity jobs.
More about Security+ certification

CySA+
CompTIA Cybersecurity Analyst / CySA+ is an intermediate-level certification that applies behavioral analytics to the IT security market to improve the overall state of IT security. IT security professionals need security analytics skills to detect threats. This certification verifies the skills needed to improve threat visibility across a broad attack surface by focusing on network behavior, including an organization’s interior network. CySA+ focuses on a defensive approach through incident detection and response.
More about CySA+ certification

PenTest+
CompTIAPenTest+ is an intermediate-level certification that verifies competency in the knowledge and skills required to plan and scope an assessment, understand legal and compliance requirements, perform vulnerability scanning and penetration testing, analyze data, and effectively report and communicate results. PenTest+ focuses on an offensive approach through penetration testing and vulnerability assessment.
More about PenTest+ certification

SecurityX (formerly CASP+)
CompTIA re-branded CASP+ to SecurityX in December 2024.
SecurityX is an expert level certification in enterprise security; risk management; incident response; research and analysis, along with the integration of computing, communications, business disciplines and enterprise-level cyber security threats. Earning SecurityX certification not only showcases your skills and commitment, but also enhances your resume and elevates your professional status.
Learn about SecurityX certification

From EC-Council

CND
EC Council Certified Network Defender / CND certification focuses on creating Network Administrators who are trained on protecting, detecting and responding to the threats on the network. Network administrators are usually familiar with network components, traffic, performance and utilization, network topology, location of each system, security policy, etc.
Learn about CND

CEH: Certified Ethical Hacker
They say to beat a hacker you have to think like one. EC Council's CEH certification is for an individual who is usually employed with the organization, and who can be trusted to undertake an attempt to penetrate networks and/or computer systems using the same methods as a Hacker.
See CEH Ethical Hacker certification

CHFI
EC-Council Computer Hacking Forensic Investigator / CHFI is the process of detecting and investigating hacking attacks and properly extracting evidence to report the crime and conduct audits to prevent future attacks. Computer Investigation techniques are being used by police, government and corporate entities globally who often use EC-Council's CHFI certification to confirm one's skills.
Learn more about CHFI

CCISO
EC-Council Certified Chief Information Security Officer / CCISO is a top level cybersecurity certification that focuses not only on technical knowledge but on the application of information security management principles from an executive management point of view. CISO's are typically the highest paid job title in cybersecurity.
Learn more about CCISO

From ISC

CISSP
Certified Information Systems Security Professional / CISSP certification is sponsored by ISC. It provides information security professionals with not only an objective measure of competence but a globally recognized standard of achievement. This credential is ideal for mid- and senior-level managers who are working toward or have already attained positions as CISOs, CSOs or Senior Security Engineers.
More on CISSP

From Microsoft

Security, Compliance and Identity Fundamentals (SC-900)
This Microsoft cybersecurity certification is right for those who need familiarity with Microsoft security, compliance, and identity solutions. This certification is a good foundation upon which to build a career in Microsoft security.
See certification for Security, Compliance & Identity Fundamentals

Security Operations Analyst Associate (SC-200)
Security professionals in this role use Microsoft Azure Sentinel, Azure Defender, Microsoft 365 Defender, and third-party security products to locate, investigate, and respond to system threats as well as advise on ways to improve threat protection practices.
More on Security Operations Analyst Associate

Identity and Access Administrator Associate (SC-300)
An Identity and Access Administrator uses Azure AD to design, implement, and operate an organization's identity and access management systems among other tasks.
View Identity & Access Administrator Associate certification

Information Protection Administrator Associate (SC-400)
An information protection administrator defines applicable requirements and tests IT processes and operations against policies and controls. They also plan and implement controls that meet organizational compliance needs.
See Microsoft Information Protection Administrator certification

Azure Security Engineer Associate (AZ-500)
An Azure security engineer implements cybersecurity controls and threat protection, manages identity and access, and protects data, applications, and networks in cloud and hybrid environments.
Learn about Azure Security Engineer Associate

Microsoft Cybersecurity Architect Expert (SC-100)
A Microsoft cybersecurity architect is an expert-level certification that confirms you can design and architect solutions using zero trust principles and specify security requirements for cloud infrastructure
More on Microsoft Cybersecurity Architect Expert

From NIST / NICE

NIST NICE Cybersecurity Workforce Framework is the foundation for increasing the size and capability of the U.S. cybersecurity workforce.

NIST Cyber Security Professional (NCSP) Foundation
This foundation training course is targeted at IT and Cybersecurity professionals looking to become certified on how to operationalize the NIST Cybersecurity Framework (NCSF) across an enterprise and its supply chain.
See NIST Cyber Security Professional (NCSP) Foundation

NIST Cyber Security Professional (NCSP) Practitioner
This NIST cybersecurity training looks at the impact of digital transformation on cybersecurity risks, an understanding of the threat landscape, and an approach to the application of cybersecurity controls. It provides guidance for students on the best approach to design and build a comprehensive cybersecurity program.
NIST Cyber Security Professional (NCSP) Practitioner

Cyber Security Resources