How Skilled Are Security Analysts?