- As of Feb 15 2015, There are about 10+ positions posted in various job boards on the Net. Believe me when i say its not because of growth, but rather due to a mass exodus,, AGAIN. In the last month and half roughly 13 people between the Security Operations Center and the Security Engineering Dept have quit and gone to greener pastures. A few months before that about 8 people quit in a month. The SOC used to be staffed with all Full time employees, Now majority of them are Contractors.
- The above said Contractors and anyone newer than you to the company is getting a significantly higher salary. Never mind the years you have put into the company.
- Years of no pay raises. Somehow there is never enough funding for them. Pay no attention to the multiple big $$ clients that just came on board. Oh yeah, More work for you too.
- No actual on boarding process or job training. When you get hired it is quite literally, sit with an analyst for 2 weeks. Then start working.
- 2 weeks of PTO for the first 5 years! Most professional companies are 3 to 5 weeks of PTO.
- A new thing that started is that now company 401k contributions get paid out at the end of the year, compared to the normal bi weekly payments.
- Almost ANY promotions you could get are all considered ' Lateral Moves' Meaning no pay raise. Even if you were supposed to get pay raises, somehow there is always an excuse on why you arnt getting it.
- SOC Management has NO idea what they are doing. Anyone above the Analyst level quite literally none of them are security focused, no certifications or anything.
- Because management has no idea what they are doing, Processes change almost weekly. On Friday you will do a process as you usually do, On Monday you will do it again and get in trouble because the process just changed again. So essentially, at any point, analysts are being setup for failure.
- No training to further the front lines skillset. While CSC will pay for Certifications. Management will NOT pay for Class type settings. like SANS GIAC/GCIA classes, or even pay for the different security conventions around.
I can go on forever about this place but am trying to stay within Glassdoors " We will not post reviews containing.." Rules. This review hasnt even begun to scratch the surface of the dept. Didnt get into the dept to dept arguments, and lack of communication between the company. The thousands of false positive incidents in the SIEMS and lack of tuning. ( that goes with the Lack of training, management not having a clue, and analysts being setup for failure.).
Most of the people are good people on an " outside of work " level. However professionally, If i were a client, and i know the kind of things i know now. I would tear up any contracts with CSC in a heartbeat.
