Skip to content
CertGPS
Career path

Studying Security Around a Full-Time Job: Exam Windows, Part-Time Hours and When to Switch

For people learning security on evenings and weekends: the deadlines each exam purchase starts, which exams need days off, and how ISC2 counts part-time work.

C
CertGPS

Not independently reviewed

AI-assisted content. Editorial policy · Suggest a correction

Published
Updated
Read time
5 min
On this page

Related certifications

Topics

Studying Security Around a Full-Time Job: Exam Windows, Part-Time Hours and When to Switch

Studying in the evenings, you'll usually run short of time before money. Most certification purchases start a clock: 90 days of lab access in OffSec's OSCP bundle, 120 days from activation for a GIAC attempt, 180 days on an INE eJPT voucher. Some exams also need whole days off work. So choose credentials whose deadlines fit the hours you actually have, and know how ISC2 counts part-time security work before you take any.

The clock each purchase starts

CredentialDeadline after you payThe exam itselfWhere you sit it
Security+ ($439)Voucher sold with 12 months' validity; SY0-701 retires June 11, 2027 regardless90 minutesTest center or online
GFACT ($399)120 days from activation; 45-day extensions can be bought2 hoursOnline proctored or test center
eJPTVoucher valid 180 days; the free retake must follow within 14 days48 hours in a labOnline
BTL1 (£399)Four months of training access and 100 lab hoursUp to 24 hoursOnline, unproctored
HTB CDSA ($210)Voucher valid one year, after a 15-module pathSeven days, report includedOnline
OSCP ($1,749 bundle)90 days of course and lab access23 hours 45 minutes, then 24 hours for the reportOnline, proctored

Two kinds of deadline sit in that table. CompTIA's voucher is generous, but its terms say an exam's retirement date overrides the voucher's expiry and that expiry dates can't be extended. A V7 voucher bought next spring can lapse with the exam. The other deadlines measure study time, not booking time. OffSec's 90 days is the period you have the course and labs, and a GIAC attempt's 120 days runs from activation, so don't activate until your preparation is mostly done.

Exams that need annual leave

A multiple-choice exam fits a Saturday morning. The practical ones don't. OSCP takes most of a day plus another day for the report, eJPT gives you 48 hours, and Hack The Box's CDSA runs for seven days, with the incident report due inside the same week. You can spread the eJPT across a weekend. You can't do OSCP or CDSA well around a full working day, so book the leave when you book the exam.

The course windows are tighter than the exams. Our OSCP guide calls the 90-day bundle tight unless you can study most days. OffSec's alternative is Learn One: a year of course access and two exam attempts for $2,749. With ten spare hours a week, we'd budget for the year from the start. BTL1's four months of training access suits a slower pace better, and its exam fits a weekend.

Leave room for a second attempt

Build a failed attempt into the plan, because each vendor's retake rules eat into the same deadlines. CompTIA lets you retake straight away after a first failure but makes you wait 14 days before a third try. GIAC imposes a 30-day wait, and a purchased retake adds 60 days to the attempt, wait included. INE's free eJPT retake has to happen within 14 days of the failed attempt and before the voucher's 180 days run out, so if you sit the eJPT in the last fortnight of its validity, you may lose the retake. For any of these, sit the first attempt with at least a month of the window left.

When part-time work counts as experience

Sooner or later you'll want security work on your record, and ISC2's rules show what counts. For SSCP and CISSP, a month of experience means 35 hours a week for four weeks. Part-time work counts if it's between 20 and 34 hours a week, at 1,040 hours for six months of credit and 2,080 hours for a year. Paid or unpaid internships count too, with a letter on the organization's letterhead.

So a ten-hour weekly side project, however serious, isn't experience in ISC2's terms, while a qualifying 20-hour part-time security role counts at ISC2's published conversion rate. You would need 104 weeks at that schedule to reach 2,080 hours. If you can arrange one, for example by taking on security duties in a part-time IT job or a documented internship, it starts the experience clock while you keep your main income.

ISC2's associate routes also suit a part-time pace. Pass SSCP without the year of experience and you become an Associate of ISC2, with two years to earn it. Pass CISSP without its five years and you get six years to earn them.

A working year, in order

Start with the exam whose clock is longest. Security+ suits that slot: the 12-month voucher leaves room for a slow first pass through the material, and you can sit it online on a weekend. Decide on the version first. SY0-801 is expected to launch on or around November 17, 2026, so anyone starting from scratch now should prepare for it.

Next, add one practical credential in the direction you want to work, timed for a stretch when work is quiet. BTL1 or CDSA suit defensive roles; eJPT suits testing. Hold OSCP until you can either commit most days for 90 days or pay for the longer subscription.

All the while, look for a way to log part-time security hours at your current employer. If you already work in IT, the security tickets in your own queue are the easiest place to start; our IT-to-security route covers how to claim them.

Signs it's time to go full time

No one publishes how long part-time learners take to switch, so judge by readiness rather than the calendar. You're close when you hold one knowledge exam and one practical credential, you can describe a real investigation or test you did step by step, and you have security hours a reference can confirm. At that point an extra certificate adds less than applications do. Readers without an IT job yet should read our route from no experience, and those choosing between paid courses and self-study can compare our self-taught plan.

Sources