Why This Research Matters

The cybersecurity profession is experiencing a burnout epidemic. Research consistently demonstrates that cybersecurity professionals endure some of the highest occupational stress levels of any workforce — with severe consequences for both individuals and the organizations they protect.

Studies reveal that the majority of cybersecurity professionals work in environments characterized by extreme demands, including around-the-clock vigilance, unpredictable security incidents, high volumes of overlapping alerts, and persistent time pressure. Many report working well beyond a standard 40-hour week, with some exceeding 60 hours routinely. Nearly one-third receive work-related calls while on vacation, and objective collaboration data show diminished weekend recovery time.

The psychological toll is compounded by a culture of silence. A majority of cybersecurity professionals are unlikely to report symptoms of stress or burnout to management, often due to fear of stigma or lack of institutional trust. Professionals are frequently perceived by business colleagues as obstacles, deepening a sense of professional isolation. Nearly three-quarters personally know a colleague who has experienced burnout in a cybersecurity role.

This study draws on Self-Determination Theory (SDT), one of the most comprehensive and empirically supported frameworks for understanding human motivation. Developed by Edward Deci and Richard Ryan, SDT proposes that three basic psychological needs — autonomy, competence, and relatedness — must be satisfied for individuals to experience optimal motivation and well-being.

SDT distinguishes motivation along a continuum: from amotivation (no intention to act) through controlled motivation (driven by external pressure, guilt, or anxiety) to autonomous motivation, which includes intrinsic motivation — engaging in work because it is inherently interesting and satisfying. Research consistently shows that intrinsic motivation predicts higher job satisfaction, stronger engagement, better performance, and lower burnout.

Critically for cybersecurity, intrinsic motivation has been found to be inversely associated with burnout and turnover intention. This means that professionals who are intrinsically motivated are less likely to experience burnout and more likely to remain in their roles — an outcome with significant implications for a field facing chronic workforce shortages.

Trait mindfulness — an individual's natural tendency for present-moment awareness and non-reactive attention — has emerged as a promising psychological resource in high-stress workplaces. Unlike state mindfulness (a temporary experience during meditation), trait mindfulness reflects a stable, dispositional quality that influences how people perceive and respond to daily challenges.

A robust body of empirical and meta-analytic evidence supports a positive association between trait mindfulness and intrinsic motivation across diverse populations. Research has demonstrated that mindful individuals tend to exhibit more autonomous forms of motivation, higher engagement, and better emotion regulation — all of which serve as protective factors against burnout.

Trait mindfulness is also theoretically linked to the satisfaction of SDT's basic psychological needs. Each of the five facets measured by the FFMQ-15 maps to need-supportive processes: observing supports noticing internal cues and environmental demands; describing enables effective emotion regulation; acting with awareness facilitates reflective, value-aligned choices (autonomy); nonjudging reduces self-critical internal pressure; and nonreactivity enables deliberate rather than impulsive responses.

While the positive relationship between mindfulness and intrinsic motivation has been established across educational, healthcare, and organizational settings, no empirical study has examined how specific facets of trait mindfulness relate to intrinsic motivation among cybersecurity professionals. This is a significant gap given the distinctive occupational demands, stressor profile, and workforce challenges unique to cybersecurity.

Existing studies in the mindfulness-motivation literature also tend to rely on unidimensional measures of mindfulness, treating it as a single construct rather than examining its individual facets. By using the FFMQ-15, this study provides a more granular analysis — identifying which specific dimensions of mindfulness are most strongly associated with intrinsic motivation in cybersecurity contexts.