Information Security Engineers

What the job really is

Develop and oversee the implementation of information security procedures and policies. Build, maintain and upgrade security technology, such as firewalls, for the safe use of computer networks and the transmission and retrieval of information. Design and implement appropriate security controls to identify vulnerabilities and protect digital files and electronic infrastructures. Monitor and respond to computer security breaches, viruses, and intrusions, and perform forensic investigation. May oversee the assessment of information security systems.

At a glance

• Sector: Computer & Mathematical
• O*NET-SOC code: 15-1299
• O*NET job zone: 4 — considerable preparation
• Work sample tasks on file: 12
• Tools and technologies listed: 12

What you actually do

Work sample tasks recorded for this occupation:

• Identify security system weaknesses, using penetration tests.
• Coordinate monitoring of networks or systems for security breaches or intrusions.
• Assess the quality of security controls, using performance indicators.
• Train staff on, and oversee the use of, information security standards, policies, and best practices.
• Scan networks, using vulnerability assessment tools to identify vulnerabilities.
• Develop response and recovery strategies for security breaches.
• Conduct investigations of information security breaches to identify vulnerabilities and evaluate the damage.
• Develop or install software, such as firewalls and data encryption programs, to protect sensitive information.
• Oversee development of plans to safeguard computer files against accidental or unauthorized modification, destruction, or disclosure or to meet emergency data processing needs.
• Identify or implement solutions to information security problems.
• Develop information security standards and best practices.
• Recommend information security enhancements to management.

Tools and technology

Amazon Web Services AWS CloudFormation, Amazon Web Services AWS software, Ansible software, Apple iOS, Apple macOS, Atlassian Confluence, Atlassian JIRA, Bash, Border Gateway Protocol BGP, C, C#, C++

What employers expect you to already be comfortable with.

Where this job leads

Related occupations — the usual moves up and sideways:

• Penetration Testers
• Information Security Analysts
• Security Management Specialists
• Network and Computer Systems Administrators
• Computer Systems Engineers/Architects
• Security Managers
• Computer Network Support Specialists
• Computer Systems Analysts

Getting in

O*NET assigns this occupation job zone 4 (considerable preparation). The related occupations above are the realistic routes in and out.

Find openings

Browse the verified job sources directory, or explore more occupations.

Check this against the source

O*NET OnLine: Information Security Engineers — the authoritative public-domain profile this page is derived from, including the full task list, reported skills and the wage estimates for your region.

Derived and rewritten from the public-domain O*NET database (U.S. Department of Labor / Employment and Training Administration). Figures are observations, not promises — always confirm salary, licensing and visa requirements with the employer and the relevant authority.