The incident count is meaningless. What constitutes a security incident varies wildly between organisations. Some will include events with no realised impact i

The incident count is meaningless. What constitutes a security incident varies wildly between organisations. Some will include events with no realised impact in that count (e.g secrets in logs with no evidence of misuse, software vulnerabilities), others do not. There's also massive gap between what talent organisations think they need (ie what the ad and interview says), and what they actually have the capacity to utilise, especially for in house roles. I'm an experienced blue teamer earning a top 1% salary to copy and paste yaml files all day. I'm at the point where I'm actively planning my exit from the industry, because despite the excellent pay there's only so long I can endure this level of boredom.