Stuck in a low paying job in gurgaon since 2 years

Okay so I am posting this for my brother. He has always been the smartest one in the family and we all knew it. He graduated with a solid CGPA around 8.75 and landed a job as a cybersecurity software engineer right out of college. The issue is he has been working at the same company for two years now and he is still making only 20K per month. I have tried using my connections to help him out but nothing has worked so far. He does not even know I am posting this but I really want to figure out what we are doing wrong. To all the software engineers and tech professionals here what should he be doing differently? Should he be job hopping, getting certifications, or working on side projects? Any guidance would mean a lot. Thanks in advance!