Certification Guide
Certified Information Systems Security Professional
The Certified Information Systems Security Professional (CISSP) is the flagship security certification. It requires five years of paid security work experience (or four with a relevant degree) to become fully certified. Passing CISSP is a hard filter for senior security engineering, security architect, and CISO-track roles.
Exam Code
CISSP
Cost
$749
Duration
3–6 hours (adaptive CAT format)
Passing Score
700 / 1000
Validity
3 years (requires 120 CPE credits + annual maintenance fee)
Vendor
(ISC)²
Difficulty
Expert
Salary Impact
$30K – $70K premium; near-mandatory for senior security engineering roles
Who This Certification Is For
- Engineers moving into security engineering or security architect roles
- Software engineers targeting appsec or product-security positions at $250K+
- Backend engineers pivoting to consulting or GRC work
- Engineers targeting federal or defense contractor roles that require CISSP for clearance-adjacent positions
Exam Domains
What CISSP actually tests, with weightings where the vendor publishes them:
- Security and Risk Management (16%)
- Asset Security (10%)
- Security Architecture and Engineering (13%)
- Communication and Network Security (13%)
- Identity and Access Management (13%)
- Security Assessment and Testing (12%)
- Security Operations (13%)
- Software Development Security (10%)
Study Path
An opinionated plan, in order. Timelines assume ~10 hours per week.
Prerequisite: 5 years of paid security work experience (or 4 with a bachelor's in a related field). You can pass the exam first and become an 'Associate of (ISC)²' while you accumulate experience.
Month 1–2: Read the Official (ISC)² CISSP CBK Reference (dense, do not skip)
Month 2–3: Study Notes and Theory YouTube channel + Destination Certification MindMap videos
Month 3–4: Boson practice exams — widely considered the gold standard for CISSP prep
Month 4: Book the exam. Passing CISSP is as much about mindset (think like a manager, not a technician) as knowledge.
Top Employers That Value CISSP
How HiringFunnel Uses Your CISSP
Security engineering roles at $250K+ almost universally require CISSP. HiringFunnel targets security-track positions and matches your credential to the roles that pay the premium — including the government and defense contractor pool that is invisible on generic job boards.
Have your CISSP? Let it work for you.
HiringFunnel targets roles where your certification is a keyword filter — not a nice-to-have — and applies at scale in the background.
Get Started Now