Cybersecurity is a game of intelligence, innovation, and rapid response. But increasingly, it’s also a test of whether the industry can evolve its culture as quickly as it adapts its code. Too often, these talents are only welcomed when neatly packaged to conform to neurotypical expectations.
Dwan Jones, Director of Inclusive Strategies and Engagement, highlights this dynamic. “Cybersecurity is one of the few industries where the traits commonly associated with neurodivergence can be real superpowers,” she says. But she’s quick to point out that having a seat at the table isn’t the same as feeling safe to speak.
According to the 2025 Cybersecurity Workforce Study, the field may be on the cusp of a long-overdue shift: neurodivergent professionals are finding a foothold and finding purpose. Of the 15,852 practitioners surveyed worldwide, over 2,000 identified as neurodivergent.
Their feedback reveals something powerful: cybersecurity is a space rich with opportunity for neurodivergent thinkers, yet it still too often falls short in creating environments where they can truly thrive.
A Field That Fits But a Culture That Lags
The data is promising at first glance. Approximately 73% of neurodivergent professionals surveyed stated that cybersecurity aligns with their strengths, such as deep focus, lateral thinking, and pattern recognition. These are precisely the traits that help defenders anticipate threats and outsmart attackers. But skills alone don’t guarantee success.
That parity ends, however, at the management level. “The main difference lies in management roles,” Jones notes. “Cybersecurity team leaders, being more aware and intentional, can create opportunities for their neurodivergent team members to continue growing.”
It’s estimated that 44% of neurodivergent professionals reported that they cannot fully be themselves at work, compared to just 31% of their non-neurodivergent peers. That disconnect points to a deeper issue: it’s not about fitting into the job; it’s about whether the job will fit them.
For Angela Cao, a data scientist and founding member of Women Who Do Data, the ability to feel authentically seen has been hard-won. “Earlier this year, I was featured in my workplace’s disability engagement spotlight,” she shared. “I talked openly about navigating autism, OCD, and anxiety, and the experience made me feel not just like a professional, but a whole person. That’s what real inclusion feels like: structural, not performative.”
Talent at Every Level, But Gaps in Leadership
Neurodivergent professionals are not tucked into niche roles. The study shows they are embedded throughout cybersecurity teams, from policy advisors to penetration testers. But that parity fades at the management level.
Leadership, too often, is a place where neurodivergent professionals face invisible barriers. “We know that soft skills and unwritten social codes shape who gets promoted,” says Cao. “But those definitions are usually filtered through neurotypical norms.”
In many ways, her experiences underscore how leadership tracks often privilege communication styles and interpersonal expectations that don’t reflect everyone’s reality.
At her previous university, Cao observed how even brilliant researchers were derailed, not by a lack of talent, but by toxic lab environments or a lack of psychological safety. “It taught me that talent isn’t enough. Without support systems, potential can be lost.”
To fix this, companies need more than diverse hiring. They need clear mentorship pathways, evaluation methods that aren’t biased against nontraditional communication, and feedback systems designed to surface, not suppress, different kinds of contributions.
Masking Comes at a Cost
One of the most persistent challenges neurodivergent workers face is the need to “mask,” that is, suppress natural behaviors to conform to workplace expectations. A 2023 study published in Frontiers in Psychology found that masking is common among autistic adults and is correlated with anxiety, burnout, and mental exhaustion.
That aligns with what the cybersecurity data shows: professionals disengage when forced to hide parts of themselves. “Across the board, we see job satisfaction drop if people feel like they cannot be themselves,” says Jones. “Being aware of that fact, digging deeper to explore the reasons why it is happening, and being intentional to implement change is important for employers to consider.”
That toll is familiar to Clair McLafferty, a senior data analyst at WISP, who has battled severe anxiety throughout her adult life. “I wish employers put less weight on high-pressure, live coding interviews,” she says. “They don’t reflect how we actually work. If your coping strategies fail in practice runs with friends, it sends a clear signal: no matter how much a company talks about supporting neurodivergent people, they may not follow through in practice.”
McLafferty transitioned from bartending to tech —a leap she credits not to formal training alone, but to the interpersonal skills she developed during years of managing customers and chaos. “The diplomacy it took to handle overserved patrons? That’s the same skill I use now when dealing with stakeholders,” she explains. “But more than anything, building a support network through communities like Rewriting the Code and Tech Ladies helped me believe I belonged here.”
The Power of Belonging
The survey shows that when neurodivergent professionals feel they can be themselves, job satisfaction jumps from 54% to 73%. That’s not just a mental health metric: it’s a business case.
“When people feel like they belong, they stay. They innovate. They lead,” says McLafferty. Her definition of success has evolved from chasing straight A’s and career trophies to finding balance. “Now, success means doing work I care about, having time for hobbies, and not having to mask who I am to be respected.”
Jones emphasizes that point. “The most important finding is just how much more engaged these individuals are when they feel like they can be themselves: a sense of belonging,” she says. “That leads to more confident and invested professionals and, subsequently, more resilient and sustainable teams.”
Inclusion, then, isn’t just a matter of good ethics. It’s good engineering.
From Tokenism to Transformation
One bright spot in the cybersecurity space is NeuroCyber, a global initiative that centers the lived experiences of neurodivergent professionals. Their model encompasses mentorship programs, peer support, and policy reform, all designed to redesign systems, rather than accommodate individuals.
Cao echoes the importance of community. “Co-founding Women Who Do Data gave me the confidence I first discovered as a child when I overcame early struggles with autism and graduated in the top ten of my class,” she says. “These communities have taught me that being different isn’t something to hide; it’s something to lead with.”
That shift isn’t aspirational. It’s essential.
What Teams Can Do Today
Inclusion isn’t a one-time initiative. It’s a mindset and a maintenance strategy, much like cybersecurity itself.
Jones points to efforts like publishing first-person stories from neurodivergent professionals, sharing resources on how to be an ally, and embedding inclusion into onboarding and team-building—not as side projects, but as structural priorities.
Employers should start by asking hard questions:
- Are job applications or assessments filtering out capable people?
- Is communication style favored over content?
- Are there mechanisms in place for neurodivergent employees to provide feedback safely?
Cao’s vision for the app she’s building to support graduate students reflects the kind of reform workplaces need, too. “I want to redefine performance,” she says. “Not by outdated norms, but through a strengths-based, neurodiversity-affirming lens.” Her platform will include AI-guided prompts for anonymous lab reviews, endorsement systems for inclusive advisors, and tools that promote psychological safety and well-being.
The Future Is Neurodiverse
Cybersecurity is in a race against time, against threats, and burnout. If the industry hopes to succeed, it must utilize every available tool. Neurodivergent professionals are not a niche; they are essential infrastructure.
They’re already here. They’re already innovating. The only question is whether the industry is ready to meet them halfway.
“Inclusion isn’t a bonus,” McLafferty says. “It’s the foundation for building resilient systems, teams, and futures.”
Because in the field of cybersecurity, defined by complexity, difference isn’t a liability; it’s the very thing that keeps the system secure.