What is it about #cybersecurity that causes such high burnout?
@studiosec high stakes, not enough resources, misguided priorities, mostly
@jerry @studiosec I think also fighting to be listened to
@studiosec Having to deal with everyone else.
@studiosec
#infosec has to be right *every* time.
Bad actors only have to be right once.
@studiosec it's a field where you are often forced into multiple roles and yet very few companies take your counsel/advice to heart and yet you get blamed for shortcomings.
@studiosec the constant feeling of trying to push a boulder up an icy hill while others are trying push it in the opposite direction
@studiosec nobody gives a fuck about being proactive. Everyone gives a fuck about being reactive.
@studiosec outside of core infosec functions and systems its like project managing a bunch of people that don’t report to you. Security tech built in not bolt on these days.

@studiosec what burnout?

Seriously though - it’s like a twisted version of Moore’s law. The attack surface keeps growing to the benefit of the attackers. There’s been the increasing rate of ransom attacks and their impact outside ‘the computers’; meanwhile security teams and resources scale at a fraction of that pace.

@studiosec Spending your week plugging holes on the leaking ship that is literally any modern corporation and settling down with a beer and seeing shit like this just over the horizon:

https://arstechnica.com/information-technology/2022/11/new-mac-app-wants-to-record-everything-you-do-so-you-can-rewind-it-later/

I made...a noise...when I read that.

New Mac app wants to record everything you do—so you can “rewind” it later [Updated]

Find "anything you've seen, said, or heard" using "3,750x" compression.

Ars Technica
@studiosec the mental and emotional drain from constant state of being under high stress. Taking one step forward only to find three backwards. Having to compromise or prioritise efforts due to resource constraints. Having to fix lots of others issues in order to deliver the thing that need. Lack of acknowledgment for when things going well but crucified as soon as don't. Having to deal with the "experts" that appear out of woodwork after an incident that zealous to point out what should have or could have done but had been crickets prior. Challenges having to deal with people having special needs. and many more… But conversely all these things that feel a challenge or burden when viewed from different perspective are also opportunities and what makes the role so interesting. Need to constantly step back and look at how managing yourself in these situations and find better ways of approaching and coping. Seeking innovative solutions. Working smart not hard. Asking for help and collaborating with others.