Letting Neurodiverse Talent Shine in Cybersecurity
Approximately 15% to 20% of people are neurodivergent, and that percentage could be even higher in STEM fields. Neurodiversity is a broad term that includes many different conditions: autism spectrum disorder (ASD); attention-deficit/hyperactivity disorder (ADHD); and dyslexia, to name just a few. As cybersecurity stakeholders continue to discuss filling the talent gap and tackling today’s security challenges, neurodiverse talent is a valuable resource. But attracting and working with this talent requires leaders to recognize the different needs of neurodivergent people and to foster work environments that make the most of their skills. Neurodiversity as an Asset Many major companies, such as Microsoft and SAP, recognize the value of neurodiverse talent and have formal recruiting programs. Jodi Asbell-Clarke, PhD, heard firsthand from companies with these kinds of hiring initiatives as she conducted research for her book on teaching neurodivergent people in STEM. “I expected to hear something like, ‘Oh, the CEO’s nephew was autistic, and we wanted to do the right thing. I expected to hear things about philanthropy and equity, and that w as not what I heard at all,” Asbell-Clarke, a senior leader and research scientist with TERC, a nonprofit focused on advancing STEM education, told InformationWeek. “They were saying it’s because the talent. ‘We consider neurodiversity in our workforce our competitive advantage.’ These are the most persistent and creative and systematic problem solvers.” Related:2024 InformationWeek US IT Salary Report: Profits, Layoffs, and the Continued Rise of AI How can that talent be put to work in the cybersecurity workforce? Ian Campbell was diagnosed with major depressive disorder and generalized anxiety early in his life. Then, at the start of the pandemic, he was diagnosed as autistic. Cybersecurity was not his first career. He was providing tech support for the US House of Representatives before he made the switch to security. Currently, he is a senior security operations engineer at DomainTools, a domain research service company. Throughout his career, Campbell has found hyperfocus to be one of his strengths. “Scrolling through tens of thousands of things, of log files, hyper-focusing on that, and being able to intuitively pattern match or detect pattern deviations was a huge benefit in both tech support and security,” he says. Megan Roddie-Fonseca, senior security engineer at cloud monitoring as a service company Datadog, is autistic and has ADHD. She shares how productivity is one of her biggest strengths. “I find efficient ways to do things,” she says. “I use that efficiency to be able to tackle tasks … in a way that some people might not get the same amount of work done in the same amount of time.” Related:Curtail Cloud Spend With These Strategies Challenges in the Workplace While awareness of neurodiversity, and the nuance within that very broad term, is growing, there are still plenty of potential challenges in the workplace. Neurodivergent people face the tricky question of disclosure. Should they tell their managers and coworkers about their diagnoses? Neurodiversity is more openly discussed, but that doesn’t mean there aren’t people who will misunderstand or react to disclosure negatively. “A lot of people I know who are neurodivergent … haven’t come out as neurodivergent because they don’t want to be seen that way,” says Campbell. “They don’t want, frankly, their careers limited by someone who has a poor view of neurodivergence.” The decision to conceal neurodivergent traits, known as masking, can be a difficult undertaking. “Masking … is basically suppressing your own neurodivergent urges and needs for the sake of function in a world that’s not built for us, and masking is incredibly tiring,” says Campbell. The decision to disclose or not is a personal choice, one that is likely influenced by the level of support people can expect from a workplace. Related:Forrester Speaker Sneak Peek: Analyst Jayesh Chaurasia to Talk AI Data Readiness The way people communicate at work, for example, can potentially lead to misunderstandings. One study using the classic game of telephone — a group passes information to one another down a line of several people — illustrates these potential challenges. The study broke its subjects into three groups of people: autistic, non-autistic, and mix of both. The first two groups exhibited the same skill level relating to information transfer. But communication problems arose in the mixed group. In a cybersecurity workplace, neurotypical and neurodiverse people are going to need to find ways to communicate with one another effectively. Some work environments will foster opportunities to learn how to best build those communication pathways. Some won’t. The physical aspects of the work environment can also be a challenge for neurodivergent people who have sensory processing issues. The lighting and sound levels of an office, for example, can result in sensory overwhelm for some people. Hiring and Supporting Neurodiverse Talent Enterprises can attract neurodiverse talent through formal hiring programs or by working with external organizations, such as Specialisterne. Regardless of the approach, partnered or solo, hiring managers and cybersecurity team leaders need to evaluate and adapt their strategies. During the interview process, Asbell-Clarke recommends matching that short experience to the work you hope to see in the actual work environment. If you are hiring someone who will be conducting highly detailed work under time constraints, mirror that process when evaluating candidates. “If you want to see people’s best problem-solving, give them the time and space to solve a task and then ask them about how they did it,” she says. In the cybersecurity work environment, managers will find that getting the best work from their neurodivergent workers will require varying approaches. “Neurodiversity is this massive spectrum,” says Jackie McGuire, senior security strategist at Cribl, a unified data management platform. “It can be confusing as a manager because you can have two team members who are on exact opposite ends of that spectrum who need completely polar opposite things.” For example, one neurodivergent person may thrive in a structured environment, while another may do their best work with a high degree of freedom. Additionally, the ways neurodivergent people best
Letting Neurodiverse Talent Shine in Cybersecurity Read More »