EC Council is a dumpster FIRE! avoid their training or certs this has been covered to death over the last year on this sub use the search function, it works and this question has been answered numerous times More on reddit.com

Years ago it was required for a lot of jobs and the training became cert factories where the instructor gave away the answers for paying for the class. So the industry was flooded with folks that were certified but unskilled. The cert name never fully recovered in some fields. More on reddit.com

CEH is dog shit. And exclusively an HR filter. More on reddit.com

Here's my recommendationsLook at the companies offering the jobs you want to do. Red Team / Pen Tester roles.See what certifications they want, and then build a plan around them. That will get you past the HR screening. However, some of the expensive certs just aren't feasible at this stage, because well, they be expensive! But this is where you can really show individual projects that you have done. These carry much more weight because it shows your skills and initiative. Here are some additional items to consider:The whole Comptia line of certs are consider intro certs. These aren't bad, but I wouldn't put too much into them. Security+ is the only one that I require my team to get if they haven't gotten their CISSP. Stay away from CEH. It's not worth the cost and a lot of people (myself included) won't really consider it a bonus on a resume. IMO the best certifications / courses are SANS for all of cyber security / cloud security (they are expensive though). However, there are specific certs like OSCP which carry a lot of weight for specific domains. Edit: I almost forgot. Look for companies offering internships. Sometimes you can even get training during the internship. More on reddit.com