Kashyap Thimmaraju (TU Berlin)

The increasing complexity and criticality of cybersecurity operations have placed immense cognitive and emotional demands on Security Operation Center (SOC) practitioners. These demands frequently result in burnout, diminished wellbeing, and reduced engagement, which negatively impact both individual performance and overall SOC effectiveness. This paper envisions a transformative approach to SOC productivity and practitioner well-being through targeted interventions that prevent burnout, enhance well-being, and foster engagement. By addressing the psychological challenges inherent in high-stress cybersecurity roles, our work seeks to promote holistic resilience in SOC environments. This study focuses on evaluating the mental health landscape of SOC practitioners using validated psychological scales. Leveraging the Copenhagen Burnout Inventory (CBI), Secure Flourish Index (SFI), and Short Flow Scale (SFS), we quantitatively assess burnout, well-being, and flow states among 19 SOC practitioners. The results highlight alarmingly high levels of personal and work-related burnout among participants (approx. 31-36% of participants met the criteria for high burnout), with considerable deficiencies in mental and physical health, life satisfaction, and social connectedness compared to normative workplace benchmarks. Simultaneously, participants report a sense of meaning and purpose, high financial security and flow experiences, reflecting their ability to engage deeply with challenging tasks and derive intrinsic rewards, despite a reduced sense of control, concentration and increased self-consciousness. The findings underscore the dual-edged nature of SOC roles— practitioners find purpose and fulfillment in their tasks yet face significant risks to their well-being. Broader conclusions from this work reveal the urgent need for structured interventions tailored to SOC environments. Key recommendations include fostering work environments that support mental health, promoting psychological safety, and implementing systems to address chronic stressors and workload imbalances. Moreover, the study highlights the importance of leveraging flow states as a mechanism to enhance practitioner engagement and productivity.

View More Papers

Evaluating LLMs Towards Automated Assessment of Privacy Policy Understandability

Keika Mori (Deloitte Tohmatsu Cyber LLC, Waseda University), Daiki Ito (Deloitte Tohmatsu Cyber LLC), Takumi Fukunaga (Deloitte Tohmatsu Cyber LLC), Takuya Watanabe (Deloitte Tohmatsu Cyber LLC), Yuta Takata (Deloitte Tohmatsu Cyber LLC), Masaki Kamizono (Deloitte Tohmatsu Cyber LLC), Tatsuya Mori (Waseda University, NICT, RIKEN AIP)

Read More

No Source Code? No Problem! Twenty Years of Research...

Jack W. Davidson, Professor of Computer Science in the School of Engineering and Applied Science, University of Virginia

Read More

Detecting Ransomware Despite I/O Overhead: A Practical Multi-Staged Approach

Christian van Sloun (RWTH Aachen University), Vincent Woeste (RWTH Aachen University), Konrad Wolsing (RWTH Aachen University & Fraunhofer FKIE), Jan Pennekamp (RWTH Aachen University), Klaus Wehrle (RWTH Aachen University)

Read More

Rediscovering Method Confusion in Proposed Security Fixes for Bluetooth

Maximilian von Tschirschnitz (Technical University of Munich), Ludwig Peuckert (Technical University of Munich), Moritz Buhl (Technical University of Munich), Jens Grossklags (Technical University of Munich)

Read More