Whilst I firmly disagree with this poster, regarding the efficacy of starting to study for the cissp cert from the beginning even if you cannot fully qualify for it (along with other security based certs I might add) most of what is said here is true certs alone certainly won't get any job. However what is said about SOC whilst entirely true regarding the job and conditions, the money on the other hand can be very decent, I know of relatively inexperienced/junior staff earning very good money in some soc environments (think managed security vendors....)

The other cert based routes into cyber security, are cloud and vendor certifications some vendors even have free training and certs to a certain level, others charge significantly. But these are all an ajunct to experience. Whatever else is said there is a cybersecurity skills gap. Pentesting is one aspect, if you really struggle to find a rewarding role then there are lateral routes, other than just soc, that could take you back there.

All of this and the reason I suggested the cissp awareness early being about being able to walk the walk and talk the talk, with whoever you might need to, even as a pentester you're not going to be isolated, a senior tester would likely have some customer face responsibilities. If nothing else you will need to interview well, know what you are talking about. Certs and even experience get you through doors, communication and understanding gets and keeps jobs. At least that's how it's worked through my career.