Cybersecurity Hiring Challenge: Limited Hands-On Ransomware Incident Experience Among Candidates

A cybersecurity professional conducting hiring has noticed that many candidates with strong security or IT backgrounds have limited hands-on experience with worst-case scenarios like ransomware incidents. While searching for an Incident Response (IR) lead, the poster found that most candidates only have exposure to Business Email Compromise (BEC) or spyware incidents. The poster states they learned more from triaging serious incidents than from academic or other professional experiences, and asks other professionals about their exposure to such incidents and whether it taught them significantly in a short time.