Infosec is probably one of the only areas of tech where certificates are useful. I would say where possible you should still try to get an employer to pay for them though.

But that's hard these days so I know people who paid for their own OSCP in the hopes of landing a job