Before the Vicious Cycle Starts: Preventing Burnout Across SOC Roles Through Flow-Aligned Design
Kashyap Thimmaraju, Duc Anh Hoang, Souradip Nath, Jaron Mink, Gail-Joon Ahn

TL;DR
This study analyzes 106 SOC job postings across multiple countries to understand the actual skill and certification requirements, aiming to improve hiring practices and reduce practitioner burnout by aligning job descriptions with real demands.
Contribution
It provides an empirical analysis of SOC job descriptions, revealing dominant skills and certification patterns to inform better hiring and workload management.
Findings
Communication skills are most emphasized in job postings.
Certification expectations vary widely with no universal standard.
Technical skills like Python and standards like ISO 27001 are commonly cited.
Abstract
The sustainability of Security Operations Centers depends on their people, yet 71% of practitioners report burnout and 24% plan to exit cybersecurity entirely. Flow theory suggests that when job demands misalign with practitioner capabilities, work becomes overwhelming or tedious rather than engaging. Achieving challenge-skill balance begins at hiring: if job descriptions inaccurately portray requirements, organizations risk recruiting underskilled practitioners who face anxiety or overskilled ones who experience boredom. Yet we lack empirical understanding of what current SOC job descriptions actually specify. We analyzed 106 public SOC job postings from November to December 2024 across 35 organizations in 11 countries, covering Analysts (n=17), Incident Responders (n=38), Threat Hunters (n=39), and SOC Managers (n=12). Using Inductive Content Analysis, we coded certifications,…
Peer Reviews
No public reviews on file for this paper yet. If you reviewed it on a platform where reviews are public (OpenReview, ICLR, NeurIPS, ICML), you can paste yours below so the community can read it here.
Videos
No videos yet. Explain this paper in a talk, walkthrough, or lecture? Add one.
Taxonomy
TopicsFlow Experience in Various Fields · Personal Information Management and User Behavior · Mind wandering and attention
