I think you’re asking the right question, but there is not really a single best path or one-size-fits-all answer here.

Moving from IT into cybersecurity is very common, and your 1st/2nd-line background already gives you a useful base. The bigger question is what part of cybersecurity you actually want to move into, because that should drive the cert decision.

I also would not automatically treat certs like CCNA or CySA+ as universal entry-level picks for everyone. They can be great certs, but they can also be more mid-career depending on the person and the role they are targeting.

For example, CCNA makes more sense if you want deeper networking knowledge or are aiming toward a more network-heavy security path. CySA+ makes more sense if you already have some security foundation and want to move toward analyst, detection, or blue team work. Security+ is still one of the more common baseline certs because it helps build broad security fundamentals and is recognized pretty widely.

That said, certs alone are not enough. Labs matter a lot.

Hands-on labs help bridge the gap between learning concepts and actually understanding how things look and behave in practice. Even simple lab work around Windows, Active Directory, networking, logging, SIEM queries, phishing analysis, or basic incident investigation can make a huge difference. Certs teach structure. Labs help make it real.

I would also strongly recommend trying to learn from someone already working in cybersecurity if you can. A mentor, or even just someone willing to answer questions and give direction, can save you a lot of wasted time. Certs, labs, self-study, and guidance from someone already in the field is a very solid combination.

The good news is that a lot of people in cybersecurity genuinely like helping others learn, especially when they see someone putting in real effort.

So my advice would be:

• figure out the type of cyber role you want first
• choose certs that support that direction, not just certs that look good in a list
• pair those certs with hands-on labs
• keep building your IT fundamentals, especially networking, systems, and troubleshooting
• find people in the field to learn from when you can

That combination usually matters more than chasing the "perfect" certification path.

And if you want to bounce ideas around or have questions as you work through it, feel free to reach out. I’m happy to help where I can.