At my previous security consulting firm, the leadership team kicked off a massive hiring effort of DoD veterans, driven by the idea that "cyber warfare is simil

At my previous security consulting firm, the leadership team kicked off a massive hiring effort of DoD veterans, driven by the idea that "cyber warfare is similar to real warfare, so veterans are a natural fit for cybersecurity jobs". Blech. Based on my experience working with those ex-DoD folks, I echo your sentiment. Anyone who was known to be a part of the veteran hiring initiative became a black sheep among the other rank-and-file at my company, because everyone knew that the DoD folks could hardly do anything more complex than a follow a 5-step "how to install metasploit" guide without having their hand held (and even then...). They also had very little familiarity with basic security tools like MFA, IDS, IDM softwares (which makes sense after reading the article). The worst part still was that they were very cocky about their abilities. I heard way too many times about how "I have experience with 'real war' at the pentagon, I know what I'm talking about", when in reality they certainly did not. If the actual DoD is anything like their ex-infosec employees that I worked with, I can only imagine that this article is just the tip of the iceberg.