What a Cybersecurity Career Change Actually Costs
A realistic breakdown of the time, certification fees, and lost income involved in switching into cybersecurity from another field.
People ask this question expecting a single number, but the real answer depends on where you're starting from and how you approach it. Someone already working in IT support has a very different cost curve than someone leaving a completely unrelated field like retail management or teaching. Let's break down the actual line items instead of guessing.
Certification and training costs
CompTIA Security+ runs about $404 for the exam voucher as of this writing, and most self-study routes (Professor Messer's free videos plus a $30-50 practice exam bundle from a site like ExamCompass or Jason Dion's Udemy course) keep total spend under $500. If you go the bootcamp route instead, expect $8,000-$16,000 for a 12-16 week program. Bootcamps sell speed and structure, not information you can't get elsewhere for free or cheap.
Higher-tier certs cost more. eJPT is around $200 and a genuinely good starting point for offensive-leaning roles. OSCP sits at roughly $1,599-$1,749 depending on the lab time bundle you pick. CISSP exam alone is $749, though nobody should attempt that one without several years of experience first — it's not an entry-level cert despite how often people ask about it too early.
The bigger cost is time, not money
Most people underestimate hours, not dollars. Going from zero to job-ready for a SOC analyst or help desk-to-security pivot realistically takes 300-600 hours of study and hands-on practice if you're doing it evenings and weekends around a full-time job. That's 6-12 months at 10-15 hours a week. Compress it into a bootcamp and you're trading money for time, but you still need practice hours afterward — a certificate doesn't make you job-ready by itself.
Home lab costs are small compared to the above. A used ThinkPad or a $200 mini PC running Proxmox, plus free tools (TryHackMe has a free tier, Hack The Box has free machines, Security Onion and Wazuh are free for blue team practice) gets you most of the way. Budget maybe $150-$300 total for hardware if you don't already own a decent laptop. Paid platform subscriptions (TryHackMe at roughly $14/month, HTB Academy tiers around $8-20/month) add up over a year but aren't required to start.
Lost income during the transition
This is the cost nobody puts in the marketing materials. If you cut hours at your current job to study, or take an unpaid or lower-paid IT support role as a stepping stone, that income gap is real money. Someone leaving a $60,000/year job to take a $40,000 help desk role for a year while building experience is absorbing a $20,000 opportunity cost, not just a training fee. Factor this in honestly before committing to a bootcamp loan on top of it.
Where the money actually should go
In order of value for a beginner: Security+ voucher, a home lab setup, and one paid practice platform subscription for 3-6 months. That's maybe $700-$900 total. Skip a second or third certification until you've applied for jobs and gotten feedback on what's actually being asked for in your target roles — job postings in your area are a better guide than generic advice. Don't buy CISSP prep material as your first purchase. Don't assume a $15,000 bootcamp guarantees an interview; ask for verified placement numbers, not testimonials, before signing anything.
A realistic total range
Self-directed path: $500-$1,500 all-in over 6-12 months, plus the opportunity cost of your study hours. Bootcamp path: $9,000-$18,000 plus the same lost-income math if you're not working full time during it. Neither path is wrong, but only one of them requires you to have that cash available up front, and that matters a lot depending on your situation.
The honest number most people should plan around is somewhere between $1,000 and $3,000 in direct costs if they're disciplined about self-study and picking one certification at a time, with the real cost showing up as months of consistent effort rather than a five-figure invoice.
If you're mapping out your own path, Korra Studio has related breakdowns on which certifications actually matter for entry-level roles and how to structure a home lab without overspending — worth a look before you commit any money.
Written with AI assistance, reviewed and published by Michal Pilch (CISSP), Korra Studio.
This is one note from the Korra Studio knowledge base — the platform pairs every topic with 1-to-1 mentoring.
Get started freearrow_forward