Name: Nathanael Birhan
Title: The Role of Social Science in the Career of a Cybersecurity Analyst
Introduction
In this digital age, cybersecurity analysts have an important job protecting information
and systems against cyber threats. While many consider this job to be predominantly technical in
nature, it also is a heavily social science job. Cybersecurity analysts use social science disciplines
(psychology, sociology, and criminology) to analyze human behavior, predict behavioral
cyberattacks, and further create defenses. This paper examines social science research and
principles used in the daily accountabilities of cybersecurity analysts, especially as this role
engages with society and marginalized groups.
Understanding Human Behavior in Cybersecurity
One prominent way that cybersecurity analysts utilize the social sciences is in the
foundational understanding of human behavior. Most cyber threats such as phishing or social
engineering, also depend on manipulating people as much as breaching software. Analysts look
at behavior to understand how to identify threats and educate users on how to mitigate them.
Understanding how people respond to authority or urgency can help security analysts build better
training (Workman et al., 2008). This is directly tied to psychological principles such as
cognitive biases and decision-making.
Another example is the application of criminology theories – such as Routine Activity
Theory – which explains that the opportunity for a crime occurs when a motivated offender
encounters a capable target in the absence of a guardian (Cohen & Felson, 1979). Cybersecurity
analysts use Routine Activity Theory by identifying vulnerable systems or behaviors that
attackers are willing to exploit and adding defensive measures.

Communication and Social Awareness
Communication is another important responsibility of a cybersecurity analyst. The
analyst often must communicate complex threats in layperson’s terms to employees, stakeholders
and even the public. Social science helps professionals to understand how to communicate
differently depending on the background, beliefs, and attitudes of those in their audience. This is
particularly helpful when dealing with marginalized groups who may have different access to
technology or be at a heightened level of risk online.
Take, for instance, low-income or elderly groups who might be more susceptible to
scams because they often lack digital skills (Anderson et al., 2019). It’s crucial for cybersecurity
analysts to grasp these social disparities so they can create inclusive policies and outreach
initiatives that safeguard everyone, not just those who are tech-savvy. This highlights how
sociology plays a vital role in pinpointing societal gaps and tackling them through effective
cybersecurity strategies.
Ethics, Diversity, and Public Trust
Cybersecurity analysts frequently face ethical dilemmas that require a solid
understanding of social values. They often get asked things like, “How much user data should be
collected by companies?” or “Is it fair to monitor employees?” These problems are not unique
to the field. Social science data can help analysts view these questions through multiple lenses,
including ethics, the values of the public, and the supporting public, private, and media
institutions.
Moreover, cybersecurity analysts are often called to collaborate in diverse teams and with
diverse clients, and must, therefore, be culturally attuned and cognizant of bias. Social science

concepts like implicit bias and systemic inequality enable analysts to apply fairness and respect
to their work. That’s especially important when building technologies that have implications for
marginalized communities, like facial recognition software or digital ID systems.
Conclusion
Ultimately talking about cybersecurity analyst career is overview of social science! From
understanding human behavior and communicating effectively, to addressing ethical concerns
and protecting vulnerable populations, analysts use social science research and principles at
every moment of their work. Realizing these links illuminates the fact that cybersecurity is more
than about technology—it’s about people. Cyber security professionals can build safer, more
inclusive digital spaces for everyone by integrating social science into what we do and learning
from the world around us.
References
Anderson, R., Barton, C., Böhme, R., Clayton, R., van Eeten, M. J. G., Levi, M., … & Savage, S.
(2019). Measuring the cost of cybercrime. Journal of Cybersecurity, 2(1), 1–
18. https://doi.org/10.1093/cybsec/tyv007
Cohen, L. E., & Felson, M. (1979). Social change and crime rate trends: A routine activity
approach. American Sociological Review, 44(4), 588–608. https://doi.org/10.2307/2094589
Workman, M., Bommer, W. H., & Straub, D. (2008). Security lapses and the omission of
information security measures: A threat control model and empirical test. Computers in Human