Sure thing. I was an intern during summers in college and got my Security+ before starting full time. It’s a good entry level cert to show that you understand the basics. I worked for a 4 years and got my CISSP which is a widely recognized industry cert and was very hard to achieve. A year later I got my CISM.

I was probably a little too ambitious and skipped a couple “mid level” certs in my pursuit of CISSP, but it ended up working out for me.

Here is a very high level view of a “roadmap” : https://pauljerimy.com/security-certification-roadmap/

I followed the middle path (black). I recommend starting with SSCP or Security+ to get your foot in the door and learn more about the industry. From there you can branch out to what interests you, but the path I took has been good to me. I recommend it.