Co

py

rig

ht

© 2

02

0 D

rau

p. A

ll ri

gh

ts r

ese

rve

d

1

Co

py

rig

ht

© 2

02

0 D

rau

p. A

ll ri

gh

ts r

ese

rve

d

Global Cyber Security Talent Analysis(Location and Talent intelligence for Cyber Security)

A concept document by Draup

Conceptualized and Developed: May-2020

The objective of the document is to showcase the growing importance of Cyber Security

amidst the COVID-19 crisis in B&Fs firms and providing location and talent intelligence of

Cyber Security talent to the HR leaders for global hiring

Co

py

rig

ht

© 2

02

0 D

rau

p. A

ll ri

gh

ts r

ese

rve

d

2

Cyber Security has become a key priority for Financial institutions to safeguard critical data assets that are becoming vulnerable due to COVID situation

B&FS firms are building internal Cyber Security capability rather than relying on outsourcing. To do that, HR leaders are

trying to analyse the following :

Location intelligenceUnderstanding talent availability, peer presence, and

skills/expertise of installed talent in target locations

1

Cost AnalysisAnalysing and benchmarking the cost distribution

across locations and peers

2

3

Role taxonomyUnderstanding the different job roles, relevant skills

and typical workloads of Security job family

Cyber threats are one of the major challenges for the Banking & Financial Services firms in the past decade and poses a major hindrance in the firm’s digitalization journey

COVID-19 has heightened the risks of Cyber attacks on B&FS firms due to following reasons :

Use of personal devices by employees at home

Heightened activities on digital medium for customer interaction

Leniency in Access management to allow third party networks

Top imminent cyber threats for B&FS firms

Identity theft

MalwarePhishing

mails

Unencrypted data

Third Party applications

Third Party applications

Source: Draup Analysis and primary interviews with Draup’s customers and internal stakeholders

Co

py

rig

ht

© 2

02

0 D

rau

p. A

ll ri

gh

ts r

ese

rve

d

3

Cyber Security Job roles taxonomy: Building an internal Cyber Security team has become imperative; Draup has analyzed top Cyber Security job roles and skills that are highly relevant for B&FS firms

• Security Architect• Network Security Engineer

• Cloud Security DevOps Engineer

• Security Analyst• Information Security Consultant

• Cyber Security Analyst• Cloud Security Architect

• Information Security Architect - Cloud

Leadership

RolesChief Information Security Officer Chief Information Officer Director, Cybersecurity

Cy

be

rSe

curi

ty T

ech

-Sta

ck

Security Architecture

Network

Segmentation

Cloud Security

Security System

Architecture

Security

Engineering

Security Attack

pathologies

Backup &

Recovery

Risk

Management

Threat Modeling

Security Software

Development

Software Security

Strategies

Forensic Tool

Analysis

Software Risk

Assessment

Secure Software

Management

Application

Protection

Cryptography

Cryptography

Terminologies

Cryptanalysis

Encoding/Decoding

Signal Analysis

Encryption/

Decryption

• Security Engineer (Incident Response)

• Senior Incident Handler

• Incident Response Analyst• Incident Responder

• Incident Risk Manager• Intrusion Detection

Specialist

• Cryptographer• Crypt-Analyst

• Encryption/Decryption

Engineer• Crypt Specialist

• Identification Access Management Engineer

Incident Response

Malware Analysis &

Digital Forensics

Forensic Investigation

Containment &

Eradication

Incident Response

Breach Notification

Penetration Testing

Threat detection

capability assessment

SOC operations &

Forensics tools

Ethical Hacking

Vulnerability

Assessment

Reverse Engineering

& NetFlow Analysis

• Penetration Test Engineer• Threat Monitoring Analyst

• Vulnerability Analyst

• Threat Monitoring SOC Analyst

• Network Penetration Tester

• Pen Tester

• Threat/Vulnerability Reporter

• Security Software Developer

• Cyber Security Software

Engineer• Application Security

Engineer• Security Software

Engineer

• Enterprise Security Software Engineer

Do

ma

in R

ole

s

Note: The represented data is a stack derived by analysing multiple Cybersecurity profiles and job postings from LinkedIn, Indeed, Monster, Naukri, etc. This domain clustering is defined by Draup’s Talent Module

Co

py

rig

ht

© 2

02

0 D

rau

p. A

ll ri

gh

ts r

ese

rve

d

4

Thank You

With the present COVID situation, Cyber Security Professionals could be hired remotely to perform critical security tasks;Draup analysed 150+ global locations with relevant talent pool to recommend top locations based on multiple parameters

➢ Draup analysed top Cyber Security hotspots by determining talent size of

individual job clusters (Security Software Development, Security Architecture,

Incident Response, Penetration Testing, Cryptography) across global locations

➢ Based on multiple parameters such as Talent availability, Talent Maturity, Ease of

hiring, Talent cost, Talent growth, etc., Draup recommended top favourable

locations for hiring

➢ Sample location deep dive for a recommended location- Bengaluru was provided

with analysis of top hotspots, cost, talent size and Industry presence in the

region

Methodology followed for location analysis:

Co

py

rig

ht

© 2

02

0 D

rau

p. A

ll ri

gh

ts r

ese

rve

d

5

Cybersecurity – Global Talent Hotspot: Approximately 1 Million Cyber Security professionals are employed globally; Top 6 countries employ 80% of the global Cyber Security talent

1 MillionTotal Global Cybersecurity Talent

UNITED STATES

Top MSA’s• Washington DC

• San Francisco

• New York City

• Los Angeles

• Dallas/Fort Worth Area

45%

5%

18%

5%

4%

3%

Global Cybersecurity Hotbeds

AUSTRALIA

Top MSA’s

• Sydney

• Melbourne

INDIA

Top MSA’s• Bengaluru

• NCR, India

• Pune

• Mumbai

• Chennai

CHINA

Top MSA’s

• Beijing

• Shanghai

UNITED KINGDOM

Top MSA’s• London

• Manchester

• BirminghamCANADA

Top MSA’s

• Toronto

• Montreal DUBAI

ISRAEL

JORDON

Niche Cybersecurity hotspots

>200,000

40,000 – 200,000

30,000 – 40,000

20,000 – 30,000

10,000 – 20,000

5,000 – 10,000

<10,000

Legend –Cybersecurity Talent

Top locations

Note : Draup’s proprietary talent module was used to analyse top MSA’s/locations for Cyber Security talent size across 5 clusters

Co

py

rig

ht

© 2

02

0 D

rau

p. A

ll ri

gh

ts r

ese

rve

d

6

Location Analysis: Draup analyzed over 150+ top Cyber Security locations by considering multiple parameters and recommends Bengaluru and NCR as the top favourable locations for Cyber Security talent hiring

San Francisco

Bengaluru

New York City

Seattle

NCR, India

London

Toronto

Tel Aviv

Dallas

Atlanta

Chicago

Dubai

Phoenix

Jordan

Reston, Virginia

Highly Scaled locationsSustain or Mirror locationsNiche locations

TALE

NT

MA

TU

RIT

Y1

TALENT AVAILABILITY (Total installed talent in specific location)

Draup COMMENTARY

1. Talent Maturity is a function of proportion of employees having multiple skills for the analysed role and number of employee with 5+ year of experienceNote: Draup’s proprietary module was used to analyze above characteristics of locations, similar analysis can be done at individual cluster level of Cyber Security

EstablishedEmerging

Low

High

• Bengaluru and NCR in India are the highly recommended location amongst the analysed locations for Cyber Security, Sample deep dive of

Bengaluru is provided in further slides

Bubble Size indicates – Annual Talent Growth Rate High Cost Medium Cost Low Cost

Recommended Zone

Highlights of Recommended Locations

• Talent Availability – High installed and fresh

talent availability in the recommended

locations

• Talent Cost – Low talent cost

• Talent Maturity – Moderately high talent

Maturity is observed among the

recommended locations

• Role Complexity – Security Software

Developer, Incident Responder, Security

Architect, Penetration Tester roles can be

targeted for ease of hiring in the

recommended location

Co

py

rig

ht

© 2

02

0 D

rau

p. A

ll ri

gh

ts r

ese

rve

d

7

Sample Deep dive – Bengaluru Overview: Whitefield and Enzyme Tech Park are the tech hotspots in Bengaluru, India; ~21,100 low cost and high-quality Cyber Security talent are currently available in Bengaluru

Bengaluru, India – Key Hotspots

Major Residential Areas Major Hotspots

CiscoMcAfee

WiproIBM

Tata Consultancy Services

Capgemini

Infosys

Intel

Accenture

Cognizant

Enzyme Tech Park

Marathahalli

Jayanagar

Halasuru

Basavanagudi

Oracle

Aujas

ANZ

Whitefield

Top Companies

SAPDell AccentureSamsung

Amazon

Koramangala

IST time

zone(GMT+5:30)

$11,000

$17,000

$7,500$9,500

$15,000$17,000

$23,000

$12,000$16,000

$22,000$26,000

$36,000

$21,000$25,000

$34,000

Security Software

Developer

Security Architect Incident Responder Penetration Tester Cryptographer

Entry (0-5 yrs) Middle (6-10yrs) Senior (11+yrs)Experience Split:

Security Job Roles Installed Talent

Security Software Developer ~18,000

Security Architect ~1,200

Incident Responder ~1,000

Penetration Tester ~750

Cryptographer ~150

$18,000 $26,000 $13,500 $17,000 $23,700

Talent Indicators

Talent Availability

Fresh Talent

Talent Quality

Talent Growth

Median Cost

Ease of Hiring

High Medium Low

Median Cost Analysis of Cyber Security Job Clusters (in USD)

Cyber Security Talent Overview

Median salaryNote : Draup’s proprietary talent module was used to analyse the location characteristics

Co

py

rig

ht

© 2

02

0 D

rau

p. A

ll ri

gh

ts r

ese

rve

d

8

Cyber Security Talent landscape in Bengaluru: Majority of the talent pool is employed in Security Software Developer and Security Architect job roles mainly by the IT & Tech companies

JOB ROLESTOP EMPLOYERS

(with respective talent size of role)EXPERIENCE SPLIT

EASE OF

HIRINGMEDIAN SALARY

GENDER DIVERSITY

MALE FEMALE

Security Software

Developer

Cisco – 770

Accenture – 580

IBM – 480

McAfee – 460

Oracle – 400

Wipro – 360

High $18,000 81% 19%

Security Architect

IBM – 85

Wipro – 40

Accenture – 35

Cisco – 35

Oracle – 30

TCS – 20

Moderate $26,000 88% 12%

Incident Responder

Accenture – 60

IBM – 40

Wipro – 40

Cognizant – 30

Capgemini – 10

TCS – 10

High $13,500 86% 14%

Penetration Tester

Accenture – 20

IBM – 20

TCS – 10

Infosys – 10

Wipro – 10 High $17,000 79% 21%

Cryptographer

IBM – 20

ANZ – 10

Wipro – <10

Aujas - <10

Accenture - <10 Moderate $23,700 87% 13%

High Moderate Low

45% 35% 20%

10% 35% 55%

32% 54% 14%

32% 52% 16%

25% 45% 30%

Experience Split: Entry (0-5 yrs) Middle (6-10yrs) Senior (11+yrs)

Note : Draup’s proprietary talent module was used to analyse the location and talent characteristics

Co

py

rig

ht

© 2

02

0 D

rau

p. A

ll ri

gh

ts r

ese

rve

d

9

About Draup

Co

py

rig

ht

© 2

02

0 D

rau

p. A

ll ri

gh

ts r

ese

rve

d

10

Draup uses Machine learning models to perform prior analysis and can replicate it on a broader level for any job roles/skills across functions

Learning & Development

University Relations

Mergers and Acquisitions

Digital Transformation

Compensation & Benefits

Strategic Workforce Planning

Recruitment

Peer Intelligence

Draup Capabilities & Data Assets EMPOWERS DECISION MAKING IN

ROLES & SKILLS

TAXONOMY

DIGITAL IMPACT ON

TRADITIONAL ROLES

CAREER PATH

PREDICTOR

PEER

BENCHMARKING

LOCATION

INTELLIGENCE

Explore Diverse Job Roles,

Locations and Ecosystem

Insights

PROFESSIONAL

PROFILES

TALENT

INTELLIGENCE

UNIVERSITY

INTELLIGENCE

COURSES/

CERTIFICATIONS

and diverse other use cases…

Co

py

rig

ht

© 2

02

0 D

rau

p. A

ll ri

gh

ts r

ese

rve

d

11

Draup for Location intelligence: Draup analyzes 2,500+ global locations to help global hr leaders in understanding data driven insights related to Talent/skill landscape, cost, demography and peer ecosystem

50M+ DIGITAL AND DIGITALLY INFLUENCED PROFESSIONALS

65M+JOBDESCRIPTIONS

4M+CAREERPATHS ANALYZED

52MACHINE LEARNING MODELS DEYELOPED

10M+DATA POINTS ANALYZED

100+Labor Statistic database

1,000+CUSTOM TALENT REPORTS

30,000SKILLS

7,000+DIGITAL TOOLS& PLATFORMS

100,000+COURSES

2,500+LOCATIONS

7,000+UNIYERSITIES

JOB ROLES

4,500+ PEER GROUP COMPANIES

75,000+INDUSTRIES28

30,000+UNIYERSITY

PROFESSORS

Co

py

rig

ht

© 2

02

0 D

rau

p. A

ll ri

gh

ts r

ese

rve

d

12