Hi,

First of all I'll introduce myself. I'm from Brazil, 23yrs, Working with security since 2003, I don't have much certifications just ISS-CA (IPS,IDS,MTF...). Already did EHT web Application jobs, Policy Tunning, Vulnerability Analysis and so other security jobs
My Further step:

- Focus in Pentest and EHT

This forum is great, I'd already seen some posts, and I already schedule one of the 3 certifications I want to take, so the tests are:

- CISSP (16/10/2008)
- CEH    (No data yet | I will buy the selfstudy product )
- GCERT/GCIAC

What do you guys think, do I need to change any certificate?

I did the CEH self study. I had no problems with it, and it was my first step in the world of hacking (NO hacking/pentesting experience before that). Just got started on the ECSA self study.

Good luck on the CISSP! I know it's still going to be a while, but let us know how it goes!