Jobs / Security / 15-1299.05

Information Security Engineers

Develop and oversee the implementation of information security procedures and policies. Build, maintain and upgrade security technology, such as firewalls, for the safe use of computer networks and the transmission and retrieval of information. Design and implement appropriate security controls to identify vulnerabilities and protect digital files and electronic infrastructures. Monitor and respond to computer security breaches, viruses, and intrusions, and perform forensic investigation. May oversee the assessment of information security systems.

US jobs
435,370 (SOC 15-1299 group, "Computer Occupations, All Other")
Median wage
$116,580 a year
Job family
Security

Can agents do the work of information security engineers?

We read the evidence for the whole job family, Security: Nearly all tasks (up from Not yet 12 months earlier)

Agents complete 90% or more of the tasks (or projects) on two direct benchmarks from independent institutions.

Evidence: Cybench, 100% of tasks completed; CyberGym, 99.2% of tasks completed.

7% of this occupation's work, by O*NET work activities, is measured by a direct benchmark (figures for the SOC 15-1299 group).

  • 8%Develop operational or technical procedures or standardsNot measured
  • 6%Advise others on the design or use of technologiesNot measured
  • 5%Direct scientific or technical activitiesNot measured
  • 4%Present research or technical informationNot measured
  • 4%Test performance of computer or information systemsMeasured
  • 4%Analyze performance of systems or equipmentNot measured
  • 4%Evaluate the characteristics, usefulness, or performance of products or technologiesNot measured
  • 4%Design computer or information systems or applicationsNot measured

Benchmarks for this occupation

These benchmarks name this occupation in their job mapping.

Direct evidence

Work benchmarks mapped primary to this family. They set the step when they report how many tasks agents complete.

Benchmarks for the job family

These cover work in security, not always this occupation's tasks.

Direct evidence

Work benchmarks mapped primary to this family. They set the step when they report how many tasks agents complete.

Also relevant

These benchmarks cover part of this family's work, or have no result yet. They do not set its step.

Context only

These benchmarks span many occupations, or they test how agents behave. They give context but do not set the step.

Typical tasks

From O*NET 31.0. Core tasks first. Few of these tasks have a benchmark today.

  • Identify security system weaknesses, using penetration tests.
  • Coordinate monitoring of networks or systems for security breaches or intrusions.
  • Assess the quality of security controls, using performance indicators.
  • Train staff on, and oversee the use of, information security standards, policies, and best practices.
  • Scan networks, using vulnerability assessment tools to identify vulnerabilities.
  • Develop response and recovery strategies for security breaches.
  • Conduct investigations of information security breaches to identify vulnerabilities and evaluate the damage.
  • Develop or install software, such as firewalls and data encryption programs, to protect sensitive information.
  • Oversee development of plans to safeguard computer files against accidental or unauthorized modification, destruction, or disclosure or to meet emergency data processing needs.
  • Identify or implement solutions to information security problems.
  • Develop information security standards and best practices.
  • Recommend information security enhancements to management.
Other job titles for this occupation (48)

BISO (Business Information Security Officer) · Cloud Engineer · Engineer · Information Security Auditor · Information Security System Engineer · Infrastructure Security Engineer · Security Analyst · Security Data Scientist · Security Engineer · Systems Engineer · AI Security Specialist (Artificial Intelligence Security Specialist) · Application Security Administrator (Application Security Admin) · Application Security Engineer · Automotive Security Engineer · Cloud Security Architect · Cloud Security Engineer · Communications Security Manager (COMSEC Manager) · Cyber Defense Incident Responder · Cyber Defense Infrastructure Support Specialist · Cybersecurity Architect · Cybersecurity Engineer · Cybersecurity Hardware Engineer · Cybersecurity Software Developer · Cybersecurity Software Engineer · Cybersecurity Systems Engineer · Cybersecurity Threat Engineer · Identity and Access Management Manager (IAM Manager) · Information Assurance Engineer · Information Security Administrator (Information Security Admin) · Information Security Architect · Information Security Consultant · Information Security Engineer · Information Security Loss Prevention Engineer · Information Security Management Engineer · IS Security Developer (Information Systems Security Developer) · IS Security Engineer (Information Systems Security Engineer) · IS Security Scientist (Information Systems Security Scientist) · IT Administrator (Information Technology Administrator) · IT Architect (Information Technology Architect) · IT Security Engineer (Information Technology Security Engineer) · Mobile Security Engineer · Network Engineer · Network Security Engineer · Product Security Engineer · Security Administrator (Security Admin) · Security Architect · System Security Analyst · Systems Security Engineer