Global Cyber Security Talent Analysis

(Location and Talent intelligence for Cyber Security)

Copyright © 2020 Draup. All rights reserved

A concept document by Draup

Conceptualized and Developed: May-2020

The objective of the document is to showcase the growing importance of Cyber Security
amidst the COVID-19 crisis in B&Fs firms and providing location and talent intelligence of
Cyber Security talent to the HR leaders for global hiring

1
Cyber Security has become a key priority for Financial institutions to safeguard critical data assets that are
becoming vulnerable due to COVID situation

Cyber threats are one of the major challenges for the Banking & Financial Services
B&FS firms are building internal Cyber
firms in the past decade and poses a major hindrance in the firm’s digitalization journey
Security capability rather than relying on
outsourcing. To do that, HR leaders are
trying to analyse the following :

COVID-19 has heightened the risks

Top imminent cyber threats for B&FS firms
of Cyber attacks on B&FS firms
due to following reasons :
1 Role taxonomy
Understanding the different job roles, relevant skills

Copyright © 2020 Draup. All rights reserved

and typical workloads of Security job family

Use of personal devices by employees

at home Identity Phishing
Malware
theft mails

Heightened activities on digital medium

for customer interaction
2 Location intelligence
Understanding talent availability, peer presence, and
skills/expertise of installed talent in target locations

Leniency in Access management to

allow third party networks
Unencrypted
data
Third Party
applications
Third Party
applications
3 Cost Analysis
Analysing and benchmarking the cost distribution
across locations and peers

2
Source: Draup Analysis and primary interviews with Draup’s customers and internal stakeholders
 Cyber Security Job roles taxonomy: Building an internal Cyber Security team has become imperative;
Draup has analyzed top Cyber Security job roles and skills that are highly relevant for B&FS firms

Security Software Security Architecture Incident Response Penetration Testing Cryptography

CyberSecurity Tech-Stack

Development

Secure Software Security Vulnerability

Threat Modeling Incident Response Signal Analysis
Management Engineering Assessment
Software Risk Containment &
Network Security Attack Ethical Hacking Encoding/Decoding
Assessment Eradication
Segmentation pathologies
Forensic Tool SOC operations &
Forensic Investigation Cryptanalysis
Analysis Forensics tools
Cloud Security Backup &
Software Security Recovery Malware Analysis & Threat detection Cryptography
Strategies Digital Forensics capability assessment Terminologies
Security System Risk
Application Reverse Engineering Encryption/

Copyright © 2020 Draup. All rights reserved

Architecture Management Breach Notification
Protection & NetFlow Analysis Decryption

• Security Software • Security Architect • Security Engineer • Penetration Test Engineer • Cryptographer
Developer • Network Security Engineer (Incident Response) • Threat Monitoring Analyst • Crypt-Analyst
Domain Roles

• Cyber Security Software
Engineer
• Application Security
Engineer
• Security Software
Engineer
• Enterprise Security
Software Engineer
• Cloud Security DevOps Engineer • Senior Incident Handler • Vulnerability Analyst • Encryption/Decryption
• Security Analyst • Incident Response Analyst • Threat Monitoring SOC Engineer
• Information Security Consultant • Incident Responder Analyst • Crypt Specialist
• Cyber Security Analyst • Incident Risk Manager • Network Penetration • Identification Access
• Cloud Security Architect • Intrusion Detection Tester Management Engineer
• Information Security Architect - Cloud Specialist • Pen Tester
• Threat/Vulnerability
Reporter

Leadership
Chief Information Security Officer Chief Information Officer Director, Cybersecurity
Roles

Note: The represented data is a stack derived by analysing multiple Cybersecurity profiles and job postings from LinkedIn, Indeed, Monster, Naukri, etc. This domain clustering is defined by Draup’s Talent Module 3
With the present COVID situation, Cyber Security Professionals could be hired remotely to perform critical security tasks;
Draup analysed 150+ global locations with relevant talent pool to recommend top locations based on multiple parameters

Methodology followed for location analysis:

Thank You

Copyright © 2020 Draup. All rights reserved

➢ Draup analysed top Cyber Security hotspots by determining talent size of
individual job clusters (Security Software Development, Security Architecture,
Incident Response, Penetration Testing, Cryptography) across global locations

➢ Based on multiple parameters such as Talent availability, Talent Maturity, Ease of

hiring, Talent cost, Talent growth, etc., Draup recommended top favourable
locations for hiring

➢ Sample location deep dive for a recommended location- Bengaluru was provided
with analysis of top hotspots, cost, talent size and Industry presence in the
region

4
 Cybersecurity – Global Talent Hotspot: Approximately 1 Million Cyber Security professionals are employed
globally; Top 6 countries employ 80% of the global Cyber Security talent

Global Cybersecurity Hotbeds

1 Million
Total Global Cybersecurity Talent

UNITED KINGDOM
Top MSA’s CHINA
5% 5% • London
Top MSA’s
• Manchester
• Birmingham
CANADA •
•
Beijing
Shanghai
Top MSA’s
45%

Copyright © 2020 Draup. All rights reserved

ISRAEL
•
•
Toronto
Montreal DUBAI
3%
JORDON

Legend – UNITED STATES 18%

Cybersecurity Talent Top MSA’s
• AUSTRALIA
>200,000 •
Washington DC
San Francisco INDIA
Top MSA’s
• New York City
40,000 – 200,000 Top MSA’s
• Los Angeles • Sydney
• • Bengaluru
30,000 – 40,000 Dallas/Fort Worth Area • Melbourne
20,000 – 30,000
•
•
NCR, India
Pune 4%
• Mumbai
10,000 – 20,000 • Chennai

5,000 – 10,000
Top
<10,000 locations Niche Cybersecurity hotspots

Note : Draup’s proprietary talent module was used to analyse top MSA’s/locations for Cyber Security talent size across 5 clusters 5
Location Analysis: Draup analyzed over 150+ top Cyber Security locations by considering multiple parameters
and recommends Bengaluru and NCR as the top favourable locations for Cyber Security talent hiring

Bubble Size indicates – Annual Talent Growth Rate High Cost Medium Cost Low Cost Draup COMMENTARY
High
Recommended Zone
San Francisco • Bengaluru and NCR in India are the
highly recommended location amongst
New York City
the analysed locations for Cyber
London
Security, Sample deep dive of
Bengaluru is provided in further slides
TALENT MATURITY1

Dallas Toronto Highlights of Recommended Locations

Bengaluru

Copyright © 2020 Draup. All rights reserved

NCR, India
Dubai • Talent Availability – High installed and fresh
talent availability in the recommended
Atlanta locations
Chicago
• Talent Cost – Low talent cost

Jordan Seattle • Talent Maturity – Moderately high talent

Tel Aviv
Phoenix Maturity is observed among the
recommended locations

• Role Complexity – Security Software

Reston, Virginia
Developer, Incident Responder, Security
Niche locations Sustain or Mirror locations Highly Scaled locations Architect, Penetration Tester roles can be
Low
targeted for ease of hiring in the
Emerging TALENT AVAILABILITY (Total installed talent in specific location ) Established recommended location
1. Talent Maturity is a function of proportion of employees having multiple skills for the analysed role and number of employee with 5+ year of experience 6
Note: Draup’s proprietary module was used to analyze above characteristics of locations, similar analysis can be done at individual cluster level of Cyber Security
 Sample Deep dive – Bengaluru Overview: Whitefield and Enzyme Tech Park are the tech hotspots in
Bengaluru, India; ~21,100 low cost and high-quality Cyber Security talent are currently available in Bengaluru

Bengaluru, India – Key Hotspots Cyber Security Talent Overview

Talent Indicators
Security Job Roles Installed Talent
Talent Availability

Security Software Developer ~18,000 Fresh Talent

ANZ
Security Architect ~1,200 Talent Quality

Talent Growth
Cognizant
Whitefield
Incident Responder ~1,000
Halasuru
Infosys Median Cost
Dell SAP Amazon
Accenture Penetration Tester ~750

Copyright © 2020 Draup. All rights reserved

Tata Consultancy Services Samsung
Basavanagudi
Ease of Hiring
Marathahalli
McAfee
Cisco Cryptographer ~150
Jayanagar Intel Hi gh Medi um Low
IBM Capgemini Accenture
Wipro
Koramangala
Median Cost Analysis of Cyber Security Job Clusters (in USD)
Aujas
$36,000
Enzyme Tech Park $34,000
Oracle
$18,000 $26,000 $13,500 $17,000 $23,700
$26,000 $25,000
$23,000 $22,000
$21,000
$17,000 $17,000 $16,000 $15,000
$11,000 $12,000
IST time $9,500
zone(GMT+5:30)
$7,500

Ma jor Residential Areas Ma jor Hotspots Top Companies

Security Software Security Architect Incident Responder Penetration Tester Cryptographer
Developer
Note : Draup’s proprietary talent module was used to analyse the location characteristics Experience Split: Entry (0-5 yrs) Middle (6-10yrs) Senior (11+yrs) Median salary 7
 Cyber Security Talent landscape in Bengaluru: Majority of the talent pool is employed in Security
Software Developer and Security Architect job roles mainly by the IT & Tech companies

GENDER DIVERSITY
TOP EMPLOYERS EASE OF
JOB ROLES (with respective talent size of role)
EXPERIENCE SPLIT MEDIAN SALARY
HIRING
MALE FEMALE

Cisco – 770 McAfee – 460

Security Software
Developer
Accenture – 580 Oracle – 400 45% 35% 20% High $18,000 81% 19%
IBM – 480 Wipro – 360

IBM – 85 Cisco – 35
Security Architect Wipro – 40 Oracle – 30 10% 35% 55% Moderate $26,000 88% 12%
Accenture – 35 TCS – 20

Copyright © 2020 Draup. All rights reserved

Accenture – 60 Cognizant – 30
Incident Responder IBM – 40 Capgemini – 10 32% 54% 14% High $13,500 86% 14%
Wipro – 40 TCS – 10

Accenture – 20 Infosys – 10
Penetration Tester IBM – 20 Wipro – 10 32% 52% 16% High $17,000 79% 21%
TCS – 10

IBM – 20 Aujas - <10

Cryptographer ANZ – 10 Accenture - <10 25% 45% 30% Moderate $23,700 87% 13%
Wipro – <10

Experience Split: Entry (0-5 yrs) Middle (6-10yrs) Senior (11+yrs) High Moderate Low

Note : Draup’s proprietary talent module was used to analyse the location and talent characteristics 8
 About Draup

Copyright © 2020 Draup. All rights reserved

Draup uses Machine learning models to perform prior analysis and can replicate it on a broader level for any
job roles/skills across functions

Draup Capabilities & Data Assets EMPOWERS DECISION MAKING IN

CAREER PATH Recruitment

PREDICTOR
ROLES & SKILLS PROFESSIONAL Strategic Workforce Planning
TAXONOMY PROFILES

UNIVERSITY
Peer Intelligence
INTELLIGENCE

Copyright © 2020 Draup. All rights reserved

DIGITAL IMPACT ON Explore Diverse Digital Transformation
TRADITIONAL ROLES Job Roles,
Locations and TALENT Learning & Development
Ecosystem INTELLIGENCE
PEER Insights
BENCHMARKING Compensation & Benefits

University Relations
LOCATION
COURSES/
INTELLIGENCE
CERTIFICATIONS Mergers and Acquisitions
and diverse other use cases…
10
Draup for Location intelligence: Draup analyzes 2,500+ global locations to help global hr leaders in
understanding data driven insights related to Talent/skill landscape, cost, demography and peer ecosystem

50M+
DIGITAL AND 4,500+ 75,000+ 28
DIGITALLY PEER GROUP
JOB R OL ES
COMPA NIES INDUSTRIES
INFLUENCED
PROFESSIONALS

65M+ JOB
100,000+ 2,500+ 7,000+
UNIYERS ITIES
COURS ES LOCATIONS
DESCRIPTIONS

Copyright © 2020 Draup. All rights reserved

4M+ 30,000 7,000+ 30,000+
CA REER PATHS DIGITAL TOOLS & UNIYERSITY
S KILLS PLATFORMS PROFESS ORS
ANALYZED

52 10M+ 100+ 1,000+

Labor Statistic CUSTOM
MA CHINE LEA RNING DATA POINTS TALENT
MODELS DEYELOPED ANALYZED database
REPORTS

11
12

Copyright © 2020 Draup. All rights reserved