CompTIA CySA+

Renewal: 60 CEUs over 3 years — easier than CISSP grind. CySA+ also auto-renews lower-stack certs (Sec+, Net+, A+) when earned. Common pathway: Sec+ → CySA+ → CISSP.

Often positioned as the "blue team Sec+" — recommended for SOC tier-1/2 analysts and IR roles. Outside govcon, hands-on alternatives like HTB CDSA ($490) and Blue Team Level 1 ($499) are gaining traction with similar coverage at lower cost.

Step up from Sec+ in difficulty — heavy PBQs around log analysis (Splunk-style queries), packet captures, vulnerability scan output interpretation. $404 fee feels steep but cheaper than GCIH/GCFA alternatives at SOC analyst tier.

DoD 8570 / 8140 approved for CSSP analyst roles — mandatory for many SOC analyst positions in U.S. federal/contractor space. CS0-003 (current version) added more cloud and threat-hunting content. Most recommend Jason Dion + Mike Chapple book combo.