Cybersecurity Incident Response Analyst
Robyn Brown
School of Cybersecurity, Old Dominion University
CYSE 201S: Cybersecurity and the Social Sciences <\/p>\n\n\n\n
Diwakar Yalpi
November 16, 2025 <\/p>\n\n\n\n
Cybersecurity Incident Response Analyst rely heavily on social science principles such as, psychology, sociology, human behavior, equity issues, and risk perception to investigate cyberattacks, protect digital systems, and support diverse groups of people who rely on secure technology every day. Their work blends technical skill with an understanding of human motivations, organizational culture and societal Inequalities making social science essential to the profession. <\/p>\n\n\n\n
Introduction<\/strong> <\/p>\n\n\n\n Cybersecurity is one of the fastest growing fields in the world, and it has become essential to how we live, work, and communicate. As someone studying cybersecurity and building a career in this field, I have learned that technology alone does not keep people safe. Understanding human behavior is just as important. One career that shows this clearly is cybersecurity incident response analyst. These professionals investigate and respond to cyber incidents, but their work is heavily shaped by social science and the study of people. This paper explores how social science principles appear in their daily world, how this career impacts society, and why it matters especially for marginalized communities who are often the most vulnerable online. <\/p>\n\n\n\n Social Science Principles in the IR Analyst Role<\/strong> <\/p>\n\n\n\n Even though cybersecurity sounds strictly technical, Incident Response (IR) relies heavily on understanding people. A major part of the job is trying to figure out why someone is behind an attack. Motivation matters, and psychology research has helped show cybercrime is often driven by financial stress, curiosity, revenge or even boredom (Hadlington, L. 2017). When analysts know what drives attackers, they can better predict what the next attacker may do next. <\/p>\n\n\n\n Social psychology also helps explain why so many successful attacks begin with social engineering. Hackers do not need advanced code when they can trick someone into giving up sensitive information. Analysts study patterns in user mistakes, like why people click on certain links or fall for authority-based scams. This helps them advise organizations on more effective security awareness training that meets people where they are instead of blaming them for being human. <\/p>\n\n\n\n Human computer interaction (HCI) is another important principle. Many incidents happen because policies do not match how people behave. IR analysts recognize security must be usable, and they often collaborate with teams to redesign processes that reduce human error. In this way, social science becomes part of cybersecurity strategy, not something separate from it. <\/p>\n\n\n\n Applying Key Cybersecurity Concepts in the Field<\/strong> <\/p>\n\n\n\n The incident response field puts core cybersecurity concepts into practice every single day. Analysts constantly examine how an incident threatens confidentiality, integrity, or availability and use risk management principles to prioritize what needs immediate attention. Threat modeling tools like MITRE ATT&CK help analysts understand attacker patterns, but this analysis also relies on understanding human decision making, both attackers and regular users inside the organization. <\/p>\n\n\n\n Compliance and ethics also shape the job. Whether the organization handles health records, student data, or financial information, analysts must follow strict laws and privacy guidelines. Understanding how people feel about surveillance, data sharing, and organizational trust helps analysts respond to incidents in ethical and socially responsible ways. <\/p>\n\n\n\n Marginalization and Cybersecurity <\/strong> <\/p>\n\n\n\n One of the most overlooked parts of cybersecurity is how differently it affects marginalized groups. Many low income and minority communities face higher risk online because they have less access to cybersecurity education or tools. Research shows these groups are more likely to be targeted in scams identity theft, and data exploitation (Gangadharan & Niklas 2019). <\/p>\n\n\n\n Incident Response Analyst are often among the first to notice when certain groups are disproportionately affected by the breach. They help advocate for stronger protections, clearer communication, and more inclusive security policies. As someone who is visually impaired and part of a marginalized community myself, I understand how important digital safety is. Increasing diversity in cybersecurity is not just a talking point; it directly impacts who gets protected and how well. <\/p>\n\n\n\n Career Connection to Society<\/strong> <\/strong> <\/p>\n\n\n\n Incident Response Analyst play a significant role in protecting both organizations and everyday people. Their work keeps hospitals running, secure financial systems, and helps schools and government agencies recover from cyberattacks. Because so much of our society depends on technology, one successful attack can disrupt thousands of lives. IR professionals help prevent those disruptions and restore trust in digital spaces. <\/p>\n\n\n\n They also support national cybersecurity policies and frameworks like NIST and CISA guidelines. In a world where cybersecurity and society constantly overlap, IR analysts help maintain stability in a digital landscape that affects all of us. <\/p>\n\n\n\n Scholarly Journal Sources<\/strong> <\/p>\n\n\n\n Hadlington, L. (2017). The study investigates how individual psychological\/behavioural traits relate to engagement in risky cybersecurity patterns. <\/p>\n\n\n\n Gangadharan & Niklas (2019) highlight digital inequality and how marginalized groups face more online risk.Their work connects directly to why cybersecurity professionals must be aware of social barriers that have certain communities more exposed to cyber threats. <\/p>\n\n\n\n Workman (2008) shows how social engineering relies on psychological manipulation, which helps explain why user behavior is such a major part of incident response and cybersecurity training. <\/p>\n\n\n\n Conclusion<\/strong> <\/p>\n\n\n\n The work of a cybersecurity Incident Response Analyst goes far beyond analyzing logs or blocking malicious code. It is a career rooted in understanding human behavior social influences, and how digital threats affect different communities. Social science helps analysts identify motivations, reduce user vulnerabilities, and respond ethically to incidents. As technology continues to shape society, the blend of cybersecurity and social science becomes even more important. This career not only protects organizations but also supports the safety, privacy, and dignity of people from all backgrounds, especially those who are most vulnerable. For me, the connection between cybersecurity and real people is what makes the field meaningful and worth pursuing. <\/p>\n\n\n\n References<\/strong> <\/p>\n\n\n\n Hadlington, L. (2017). Human factors in cybersecurity; examining the link between Internet addiction, impulsivity, attitudes towards cybersecurity, and risky cybersecurity behaviours. Heliyon, 3(7), e00346. https:\/\/doi.org\/10.1016\/j.heliyon.2017.e00346<\/a> <\/p>\n\n\n\n Gangadharan, S. P., & Niklas, J. (2019). Decentering technology in digital justice. Information, Communication & Society, 22<\/em>(7), 882\u2013899. https:\/\/doi.org\/10.1080\/1369118X.2019.1593484<\/a> <\/p>\n\n\n\n Workman, M. (2008). Wisecrackers: A theory-grounded investigation of phishing and pretext social engineering threats to information security. Journal of the American Society for Information Science and Technology, 59<\/em>(4), 662\u2013674. https:\/\/doi.org\/10.1002\/asi.20779<\/a> <\/p>\n","protected":false},"excerpt":{"rendered":" Cybersecurity Incident Response Analyst Robyn Brown School of Cybersecurity, Old Dominion University CYSE 201S: Cybersecurity and the Social Sciences Diwakar Yalpi November 16, 2025 Cybersecurity Incident Response Analyst rely heavily on social science principles such as, psychology, sociology, human behavior, equity issues, and risk perception to investigate cyberattacks, protect digital systems, and support diverse groups of people who rely… <\/p>\n