+1
Infosec is probably one of the only areas of tech where certificates are useful. I would say where possible you should still try to get an employer to pay for them though.
But that's hard these days so I know people who paid for their own OSCP in the hopes of landing a job
They found me from either LinkedIn or Dice. I had a US security clearance in hand and security certifications.
I remember years ago on here when developers scoffed with great arrogance and entitlement at the mere thought of professional certifications. Now many developers are struggling to find employment while I have choices they don’t have. The learn here is don’t let popularity and peer immaturity influence your career mobility.