Information Security Engineers

A subset of this occupation's profile is available. Data collection is currently underway to populate other parts of the profile.

Develop and oversee the implementation of information security procedures and policies. Build, maintain and upgrade security technology, such as firewalls, for the safe use of computer networks and the transmission and retrieval of information. Design and implement appropriate security controls to identify vulnerabilities and protect digital files and electronic infrastructures. Monitor and respond to computer security breaches, viruses, and intrusions, and perform forensic investigation. May oversee the assessment of information security systems.

Occupation-Specific Information

Tasks

  • Assess the quality of security controls, using performance indicators.
  • Conduct investigations of information security breaches to identify vulnerabilities and evaluate the damage.
  • Coordinate documentation of computer security or emergency measure policies, procedures, or tests.
  • Coordinate monitoring of networks or systems for security breaches or intrusions.
  • Coordinate vulnerability assessments or analysis of information security systems.
  • Develop information security standards and best practices.
  • Develop or implement software tools to assist in the detection, prevention, and analysis of security threats.
  • Develop or install software, such as firewalls and data encryption programs, to protect sensitive information.
  • Develop response and recovery strategies for security breaches.
  • Identify or implement solutions to information security problems.
  • Identify security system weaknesses, using penetration tests.
  • Oversee development of plans to safeguard computer files against accidental or unauthorized modification, destruction, or disclosure or to meet emergency data processing needs.
  • Oversee performance of risk assessment or execution of system tests to ensure the functioning of data processing activities or security measures.
  • Provide technical support to computer users for installation and use of security products.
  • Recommend information security enhancements to management.
  • Review security assessments for computing environments or check for compliance with cybersecurity standards and regulations.
  • Scan networks, using vulnerability assessment tools to identify vulnerabilities.
  • Train staff on, and oversee the use of, information security standards, policies, and best practices.
  • Troubleshoot security and network problems.
  • Write reports regarding investigations of information security breaches or network evaluations.

back to top

Technology Skills

  • Access software — IBM Tivoli software
  • Application server software — Docker Hot technology ; GitHub Hot technology ; Kubernetes Hot technology
  • Authentication server software — Single sign-on SSO In Demand
  • Cloud-based data access and sharing software — Platform as a service PaaS
  • Cloud-based management software — Amazon Web Services AWS CloudFormation Hot technology ; Google Cloud software
  • Configuration management software — Chef Hot technology ; IBM Terraform Hot technology ; Puppet Hot technology
  • Content workflow software — Atlassian JIRA Hot technology
  • Data base management system software — Elasticsearch Hot technology ; MongoDB Hot technology ; NoSQL Hot technology
  • Data base reporting software — Microsoft SQL Server Reporting Services SSRS Hot technology ; Reporting software
  • Data base user interface and query software — Amazon Web Services AWS software In-Demand Hot technology ; IBM DB2 Hot technology ; Microsoft SQL Server Hot technology ; ServiceNow Hot technology ; 2 more
  • Development environment software — Go Hot technology ; Microsoft Azure software In-Demand Hot technology ; Microsoft PowerShell In-Demand Hot technology ; Ruby Hot technology ; 3 more
  • Electronic mail software — Microsoft Outlook Hot technology
  • Enterprise application integration software — Enterprise application integration EAI software; Jenkins CI Hot technology ; Microsoft SQL Server Integration Services SSIS Hot technology
  • Enterprise resource planning ERP software — Management information systems MIS
  • Enterprise system management software — Splunk Enterprise In-Demand Hot technology ; Tanium software
  • Expert system software — Ansible software Hot technology
  • File versioning software — Git Hot technology
  • Geographic information system — Geographic information system GIS systems
  • Graphics or photo imaging software — Microsoft Visio Hot technology
  • Internet directory services software — Active directory software; Microsoft Active Directory In-Demand Hot technology ; Network directory services software; Oracle Unified Directory
  • Network monitoring software — IBM QRadar SIEM; Microsoft Azure Sentinel; Snort; Wireshark; 1 more
  • Network security and virtual private network VPN equipment software — Firewall software In Demand
  • Network security or virtual private network VPN management software — IBM Resource Access Control Facility RACF; Intrusion detection system IDS
  • Object or component oriented development software — C# Hot technology ; Oracle Java In-Demand Hot technology ; Perl Hot technology ; R Hot technology ; 2 more
  • Office suite software — Microsoft Office software Hot technology
  • Operating system software — Apple iOS Hot technology ; Bash Hot technology ; Microsoft Windows Server Hot technology ; UNIX Shell Hot technology ; 6 more
  • Presentation software — Microsoft PowerPoint Hot technology
  • Project management software — Atlassian Confluence Hot technology ; Microsoft SharePoint Hot technology ; Microsoft Teams Hot technology
  • Risk management data and analysis software — ArcSight Enterprise Threat and Risk Management; McAfee Enterprise Security Manager
  • Spreadsheet software — Microsoft Excel Hot technology
  • Switch or router software — Border Gateway Protocol BGP Hot technology
  • Transaction security and virus protection software — Microsoft Defender Antivirus; Microsoft Security Esssentials; Tenable Nessus
  • Transaction server software — IBM Middleware
  • Web platform development software — JavaScript Hot technology ; JavaScript Object Notation JSON Hot technology ; PHP Hot technology ; React Hot technology ; 2 more
  • Word processing software — Collaborative editing software
Hot technology
Hot Technologies are requirements most frequently included across all employer job postings.
In demand
In Demand skills are frequently included in employer job postings for this occupation.

back to top

Occupational Requirements

Detailed Work Activities

back to top

Experience Requirements

Job Zone

Title
Job Zone Four: Considerable Preparation Needed
Education
Most of these occupations require a four-year bachelor's degree, but some do not.
Related Experience
A considerable amount of work-related skill, knowledge, or experience is needed for these occupations. For example, an accountant must complete four years of college and work for several years in accounting to be considered qualified.
Job Training
Employees in these occupations usually need several years of work-related experience, on-the-job training, and/or vocational training.
Job Zone Examples
Many of these occupations involve coordinating, supervising, managing, or training others. Examples include real estate brokers, sales managers, database administrators, graphic designers, conservation scientists, art directors, and cost estimators.
SVP Range
(7.0 to < 8.0)

back to top

Training & Credentials

State training
Local training
Certifications

back to top

Apprenticeship Opportunities

Example apprenticeship titles for this occupation:

  • Cyber Defense Incident Responder

Specific title(s) listed above are vetted by industry and approved by the U.S. Department of Labor for use in a Registered Apprenticeship Program.

Start your career and build your skillset. Visit Apprenticeship.gov external site to learn about opportunities related to this occupation.

back to top

Worker Characteristics

Interests

Interest code: CIR
Want to discover your interests? Take the O*NET Interest Profiler at My Next Move.
  • Conventional — Work involves following procedures and regulations to organize information or data, typically in a business setting. Conventional occupations are often associated with office work, accounting, mathematics/statistics, information technology, finance, or human resources.
  • Investigative — Work involves studying and researching non-living objects, living organisms, disease or other forms of impairment, or human behavior. Investigative occupations are often associated with physical, life, medical, or social sciences, and can be found in the fields of humanities, mathematics/statistics, information technology, or health care service.
  • Realistic — Work involves designing, building, or repairing of equipment, materials, or structures, engaging in physical activity, or working outdoors. Realistic occupations are often associated with engineering, mechanics and electronics, construction, woodworking, transportation, machine operation, agriculture, animal services, physical or manual labor, athletics, or protective services.

back to top

Workforce Characteristics

Wages & Employment Trends

Median wage data for Computer Occupations, All Other.
Employment data for Computer Occupations, All Other.
Industry data for Computer Occupations, All Other.
Median wages (2023)
$50.44 hourly, $104,920 annual
State wages
Local wages
Employment (2023)
470,900 employees
Projected growth (2023-2033)
Much faster than average (9% or higher)
Projected job openings (2023-2033)
34,800
State trends
Top industries (2023)

Source: Bureau of Labor Statistics 2023 wage data external site and 2023-2033 employment projections external site. “Projected growth” represents the estimated change in total employment over the projections period (2023-2033). “Projected job openings” represent openings due to growth and replacement.

back to top

Job Openings on the Web

State job openings
Local job openings

back to top

More Information

back to top

Professional Associations

Disclaimer: Sources are listed to provide additional information on related jobs, specialties, and/or industries. Links to non-DOL Internet sites are provided for your convenience and do not constitute an endorsement.

National Associations
Regional Associations
Accreditation, Certification, & Unions

back to top