Doing the Work Before You Feel Ready

Reflections on growth, uncertainty, and learning in motion

In cybersecurity, there’s a quiet moment most of us hit sooner or later. It’s the moment where you’re staring at a system, an incident, or a decision that carries real weight. Maybe it’s a production environment you didn’t design, an alert that isn’t clearly a false positive or a responsibility that suddenly has your name on it. And the first thought isn’t, “Let’s do this”. It’s, “Can I really do this”.

This happens because you aware of the gaps in your knowledge and this reduces the level of confidence you have in yourself.

I used to think confidence was something you were supposed to have before you took on bigger challenges. Like one day you’d wake up and suddenly feel “ready and confident” to lead an investigation, make a call under pressure, or own the outcome of a risky decision.

What I’ve learned instead is that confidence usually shows up after you start moving and only because you moved.

Cybersecurity has a way of forcing that lesson. You don’t get perfect visibility, you don’t get complete information, or clean answers. What you are get are; logs that don’t quite line up, alerts that might mean five different things, and systems that were built with constraints you didn’t choose. And then you also get a choice: step into the ambiguity or step away from it.

And here’s the truth: growth almost always feels like you’re doing something a little too early.

Every meaningful step I’ve taken in this field came with doubt attached. Every increase in scope came with the thought, someone else probably understands this environment or task better than I do. But experience isn’t built by waiting for perfect certainty. It’s built by engaging with imperfect systems, making the best decision you can with the information you have, learning from the outcome, and doing it again with slightly better judgment next time.

Cybersecurity doesn’t need perfect people. It needs people who can think clearly under uncertainty, who can stay curious instead of defensive, and who are willing to learn in motion.

If you’re in a place right now where you feel stuck, hesitant, or unsure whether you’re “ready” for the next step consider this your reminder: readiness is often a result, not a prerequisite.

You don’t become confident and then do hard things.

You do hard things and that’s how the confidence gets built.

And sometimes, the most important career move isn’t a new certification, a new title, or a new tool.

It’s simply choosing to take responsibility for the problem in front of you even when you’re not fully sure you can.

I recently wrote about how cybersecurity regulations would evolve. You can read HERE