Johnny Gomez-Reyes
CYSE 201s
Professor Yalpi
13 April 2025
Career Paper
Introduction
BLUF: To understand human behavior, stop cyberthreats, and deal with the social
impacts of digital vulnerabilities cybersecurity experts use social science research and principles.
Cybersecurity analysts work at the point of technological knowledge and human comprehension.
Their success frequently depends on their understanding of human behavior even if an important
part of their job involves monitoring systems, identifying breaches, and protecting networks.
From what I’ve in order for these specialists to spot trends, predict risks and create systems that
take sociological and psychological factors into account social science research is one of the
most important parts.
Body
One of the key concepts that I’ve picked up from class is behavioral profiling. This
method is used by cybersecurity analysts to find inconsistencies in user behavior. Based on
psychological research behavioral profiling looks at what users consider to be normal digital
activity. A breach or threat by insiders can be detected when a user’s behavior changes from
accepted norms. An alert might be set off if and when a worker might suddenly access a lot of
private information late at night. Using psychological concepts like pattern recognition and cognitive bias awareness helps analysts detect between possibly harmful activity and normal
behavior.
Situational awareness is another concept that brings together technical monitoring with
an awareness of the larger social setting. Analysts need to stay informed about external social,
political, and economic changes in addition to internal systems. An example that comes to mind
is social science studies on changes in geopolitics and how they can help predict the potential
locations and timing of cyberattacks. In the context of cyberwarfare when both state and non
state actors make use of societal weaknesses this is especially important. Cybersecurity
researchers are able to identify possible dangers and adjust defenses by using open source data to
follow public state and sociopolitical discussion.
Cultural competence is a third key concept I’d mention. In interactions between
underrepresented communities and cybersecurity professionals I think this is very important.
Analysts need to understand how socioeconomic status, language limitations, and internet access
affect cybersecurity awareness and behavior. It is clear how because they lack money or
education marginalized groups may be more vulnerable to identity theft or phishing scams. For
the sake of digital equity, I think analysts in the nonprofit or public sector have to change their
approaches. The cybersecurity gap can be closed by creating user interfaces that are multilingual
or by reaching out to low income communities.
Awareness of social engineering is another concept. Psychological manipulation is the
target of social engineering attacks. Social science insights are used by analysts to educate
communities and staff about these strategies. Having a solid understanding of ideas like urgency,
authority, and trust helps analysts create educational programs and policy proposals that work. One of the main reasons for cybersecurity breaches is human mistake which is decreased by
these types of insights.
Working with underrepresented communities gives three major challenges for
cybersecurity experts. The first is that digital institutions are not trusted. Because of their past
marginalization some communities might reject cybersecurity initiatives because they think they
are intrusive or associated with surveillance. The second issue is they don’t have digital literacy
which makes it harder for people to spot risks or protect their own information. The third issue is
the mismatch in resources and how organizations that help people in need do not have the
financial means to hire analysts or put in place strong security measures.
Conclusion
Social science is so important for cybersecurity analysts to understand all the complicated
social dynamics behind digital threats, connect with a variety of communities, and shape their
strategies. By bringing together sociopolitical analysis, behavioral science, and cultural
awareness, analysts not only protect systems but also advance a more secure and fair digital
society.
References
Chng, C., et al. (2024). Cybersecurity Analysts and the Importance of Social Science.
Cybersecurity & Social Science, 15(2), 103–118. https://sites.wp.odu.edu/cyber-201s/wp-
content/uploads/sites/35301/2024/04/Career-Pap.pdf
NASCIO. (2024). Expanding Cybersecurity in Underserved Communities.
https://www.nascio.org/wp-content/uploads/2024/11/NASCIO_Cybersecurity-in-
Underserved-Communities_2024_a11y.pdf
Hadnagy, C., & Fincher, M. (2021). Social Engineering: The Science of Human Hacking. Wiley.
https://www.wiley.com/enus/Social+Engineering%3A+The+Science+of+Human+Hackin
g%2C+2nd+Edition-p-9781119433750