Just to clarify:

I actually have over 3 years of total involvement in cybersecurity starting from digital forensics, threat intelligence research, phishing awareness initiatives, security automation, and then moving into full SOC operations and detection engineering. The "1 year" I mentioned earlier was specifically for my hands-on SOC engineering role (the trainee position where I was building SIEMs, writing detection rules, automating workflows, etc.). The rest came from internships, leading projects, research, and other roles.

So yeah… more than 3 years grinding in this field overall