I kind of got lucky and got promoted into a IT Security Analyst position without any certs. I have no idea if anything I’m doing is actual cybersecurity analyst work or if its just what my company thinks it needs. Scheduled to take my SSCP later this month with implications a title change and raise if I pass, though trying to study for it has not been going well [after paid -for training]. I’ve thought of trying to apply for a similar role at another company but not exactly enjoying incident response. Love the company and team I’m on tho.