This is about right, looking at first assessment for those whom went for SID test.
Security assessment should be about 1-2 months.

But overall timeline is around 4-6 months , for expectation on the first assessment as a starting point. So for those take at July for example, you can expect Jan thereabout for your answer.

For those in August, maybe in Feb.

And yes, it is difficult , in fact very difficult to get in. It is easy to get out, but what you gonna do outside as the skills transfer might not be very relevant and there are things you cannot share as you had signed some documents.

DYDD, choose wisely when offered, try to ask for a higher pay.