Careers in cyberpsychology - in conversation with Dr Inka Karppinen

How would you describe your job to a 12-year-old?

I can work anywhere in the world with my computer. Everyone in our company has superpowers, and we try to make the world a better place.

I focus on mindreading and magically changing your behaviour. For example, I can take a very accurate guess of your password or persuade you to behave better.

Also, I read a lot of books, write and talk to strangers in other professions. This keeps people from all backgrounds safe on the internet.

Thieves can also use mind-bending powers to trick you into doing something on your computer at home. This makes your computer very sick, and it might be very expensive to find a specialist 'computer doctor' to fix it.

We try to help people so they can protect themselves and their families. We also give them tips about how to look after their computers so they don't become sick and how to catch thieves! How cool is that?!

Could you describe what you do during a typical workday?

At CybSafe, I engage in a variety of tasks that contribute to the success of my role as a lead behavioural scientist. They provide evidence-based research and expertise in cyberpsychology to the company.

I work in collaboration with engineering, product, design and sales teams.

But most often, my project responsibilities encompass scientific research, mentoring junior team members, and conducting thought leadership and user research.

All this helps with the product development process.

Currently, I'm responsible for our Annual Cybersecurity Attitudes and Behaviours (CAB) report. This includes designing the survey, data collection, analysis and write-up.

This takes most of my time as this year's data set includes six countries and over 6000 participants! The report is due to be published at the end of summer, so keep your eyes peeled! Read our previous CAB22.

I'm also developing the next version of our world's most comprehensive Security Behaviours Database (SebDB) with plenty of scientific backing and industry collaboration.

The SebDB is an open-source and free resource currently open for feedback on all 148 security behaviours.

I regularly present (and participate) at both domestic and international conferences and appear on podcasts and webinars advocating the human factor and women in cyber.

Close to my heart is mentoring the next generation of cyberpsychologists and researchers.

The steps you took to get where you are today?

Psychology has always been the 'red thread' in my life and career.

As a child, I wished to 'serve people' so my ambition was to "be a waitress and have a small dog!" (direct quote from my notebook, age 7). However, this dream was set aside quite early on.

When I finished my A-levels in Finland after graduating within the top six psychology students in the country, I decided to take gap years and move to London.

After a few years of working, I went to university, and, while studying psychology, I worked in financial services to support myself.

I'm from a single-parent family and the first, and only, one to go to university. Working in professional industries piqued my interest in studying occupational psychology.

With my 'addiction' to studying and learning, I then sought PhD programmes where I could use psychology and came across UCL's Security and Crime Science Doctoral Training Center (SECReT).

Here, I took a multidisciplinary approach, incorporating insights from psychology, criminology, computer science, and behavioural economics.

The programme was great as the diverse and collaborative environment fostered cutting-edge research and further developed my interest in the modern security threats in the world.

Afterwards, I took some time off from security-related topics to help my local community.

I also worked in the psychology consultancy, which specialised in working with biotech and pharmaceutical teams prioritising the patient experience.

Here, I deepened my passion for behavioural science and behaviour change theories, which then led me thinking to apply these skills also in the field of security.

And, voila! The rest is history. I found a company where I could combine my passion for psychology and security, and make a real difference to people's lives around the world through cyberpsychology!

How do you apply cyberpsychology in a corporate setting and what challenges do you experience?

I apply mixed methods to uncover people's cyber security attitudes and behaviours with the aim of designing workable digital solutions.

Basically, my passion is to narrow the research gap between academia and practice in order to create a meaningful positive impact on people's online behaviours.

I lead thought-leadership projects such as CAB2023 project, and I was the lead researcher for the Home Office-funded project Cyber Security Quirks: Personalised Interventions for Human Cyber Resilience.

As a non-native English speaker from Finland, I had to overcome language barriers and cultural differences to succeed in my field.

Considering my background, one achievement that stands out is being the first in my family to attend university and pursue a career beyond the traditional professions I was expected to follow.

It's important to actively seek opportunities to contribute my ideas and perspectives, even in spaces where I may initially feel overlooked.

By making my voice heard, I can challenge biases, broaden perspectives, and foster a more inclusive work environment.

A lesson that profoundly impacted my personal and professional growth is the significance of learning from mistakes.

Setbacks are inevitable, and instead of dwelling on blame or regret, I've learned the value of adopting a solution-focused mindset.

Shifting my focus from the problem to finding the best course of action, I've learned to identify alternative approaches, seek feedback, and leverage lessons learned for future decisions.

This mindset promotes continuous improvement and innovation in the teams I lead.

Moreover, I've embraced the importance of backing oneself in the face of adversity, particularly in male-dominated environments.

Expressing opinions and standing up for beliefs can be daunting, but I've realised the power of presenting evidence-supported perspectives, engaging in effective negotiation, and displaying confidence in discussions and decision-making.

By honing these skills, I've gained influence, built credibility, and challenged the status quo. This lesson has empowered me personally and set an example for other women, contributing to greater gender equality and inclusivity.

What are some of the most important factors to consider when choosing a job in cyberpsychology?

When I was studying psychology, the field of cyberpsychology didn't exist.

However, the most important factor in this role has been to communicate science in 'layman' terms and being able to translate academic research into practice (and policy).

If you come to work in the industry, we also must answer the question 'So What?' from the readers' perspective, and we do not have vast amounts of time to work on a specific problem.

The ability to be flexible, and quick, but thorough without compromising professional integrity is a great quality to have.

Third, understanding research methods and how to design and conduct both qualitative and quantitative research independently is crucial.

We often work with data scientists and engineers. While we can speak the same language, we come from different knowledge backgrounds and experiences.

As cyberpsychologists, we can help with human factor perspectives that might be otherwise overlooked. We have empathy with the end-users and the ability to communicate and influence (or even 'nudge') people's online security behaviours.

Often I feel like an online cybertherapist and coach, where my help directly influences people's online safety protecting them from cyber criminals.

This then translates to general individual well-being. Imagine a role where you can help not only one person but many at the same time!

It's important to have confidence in your knowledge and skills gained from the psychology degree (even if it is not particularly focused on cyberpsychology).

Believe in your ability to make a positive difference through your unique contributions. Don't let the pursuit of perfection hold you back.

Take the leap, even if you are not the most tech-savvy person - yet - start with small steps and continue to improve along the way. 

What advice would you give to someone interested in a career in cyberpsychology?

My advice to anyone with aspirations in cyberpsychology is to just go for it.

Find meaningful topics and projects you are interested in and pursue them. Don't be afraid to ask for help from people walking a similar path.

Finding a mentor and/or an advocate—or even someone outside the industry to vent to and work through things with—can be a great tool to help in this mission.

Embrace curiosity, ask questions, and cultivate resilience in the face of challenges.

But, also be humble and remember you and everyone around you are learning, growing and trying to navigate complex cybersecurity environments. Things are not always what they seem.

Whether you have a technical or non-technical background, if you're interested in helping people or applying your skills to the cybersecurity field, all kinds of skills have space in security.

We need all backgrounds, expertise, and experiences if we want the industry to move forward with the times.

Cybercriminals are a diverse group of people and often they are the best psychologists—not just your hoodie-wearing 'scary' guys behind the computer screen—so let's also have more psychologists in the field so we can protect everyone.

As a cyberpsychologist, you can leverage your diverse skill set to your advantage and enter a career in tech with empathy and fresh perspectives.