We are perhaps being too cynical, it isn't quite that straight forward. I hear you also need to wear the right tie and buy the correct pair of expensive shoes.
I think it's the same everywhere. I work in finance, after 5 years of working out of college in almost convinced that incompetence is a requirement for senior management positions. That and ass kissing and the ability to twist facts
One day, my son was ranting about some guy who, in my son's opinion, was the death of multiple cool projects. He was like "I don't know how he keeps getting hired! He destroys everything he touches!"
And I told him "His resume lists multiple cool projects that he worked on."
Edit: My question and the replies are incredibly depressing as an infosec practitioner.