One year in cybersecurity: telling signal from noise
20 May 2026
Just over a year ago I didn’t know what a SIEM was. Today I’ve spent hundreds of hours investigating alerts, analyzing events and tuning detection rules.
It all started out of curiosity, with an ethical hacking course, without a clear roadmap but with a strong urge to learn. A year later, the road has been intense:
- CompTIA Security+
- eJPTv2
- Hands-on experience in a 24/7 multi-client SOC
- A Microsoft Sentinel lab focused on Identity and Cloud Security
But if there’s one thing I’ve learned, it’s that cybersecurity isn’t about having more tools, more alerts or more dashboards. It’s about telling signal from noise.
That ability to analyze and prioritize is probably the most valuable lesson from this stage. The next goal is clear: the SC-200, and to keep growing without ever letting go of my systems side.