It's bad and only getting worse. No telling how many breaches are being covered up by companies to save on labor costs. That's why I'm trying to get out now.This is the consensus I've been hearing. I'm also hearing that some of those hires are incompetent or lack social skills. I know there are also some companies our jobs that do not sponsor visa's like mine, so I'm hearing conflicting things.
Indian Cybersecurity Analysts Work Quality
Why is the quality of SOC Analysts from India absolutely horrible? Our company started hiring Indian analysts and what I see is scary. After working in the field, I now understand why so many data breaches occur. Part of it is lack of funding + employees clicking phishing emails, but the larger concern is lack of skilled analysts who can actually tell what is FP versus true positive. $1 million in funding for tools/detection/SOC support/engineering are meaningless and put to waste if the front line analysts are worthless.
There are 1 billion people who live in India but every analyst I come across, from junior to "senior", has almost no idea how to investigate any alert. Almost every alert they work is literally just a copy/paste of the alert details and escalation over to client. I see other analysts do this too, but it seems to happen with 100% of Indian analysts we are hiring (regardless of their skill level). I've caught them closing out malicious file hashes and phishing emails as False Positive. Half the time they don't even bother to check the file hash on VT or run the URL through a sandbox.
It scares me that so many people are entering the cybersecurity field with absolutely no understanding of IT/computers/servers/O365/etc. and basics of cybersecurity. They have Sec+ with no IT experience, yet somehow got the job. It feels insulting to other analysts that do detailed, thorough investigations and worked their way up from help desk/system admin work to cybersecurity.
Am I being "racist" for even saying/thinking this? If not, why is the quality so bad? I KNOW there are very skilled, smart Indian analysts out there who are smarter than me but I haven't really come across any at my current company if I'm being completely honest.