Information Security Engineers
Develop and oversee the implementation of information security procedures and policies. Build, maintain and upgrade security technology, such as firewalls, for the safe use of computer networks and the transmission and retrieval of information. Design and implement appropriate security controls to identify vulnerabilities and protect digital files and electronic infrastructures. Monitor and respond to computer security breaches, viruses, and intrusions, and perform forensic investigation. May oversee the assessment of information security systems.
- US jobs
- 435,370 (SOC 15-1299 group, "Computer Occupations, All Other")
- Median wage
- $116,580 a year
- Job family
- Security
Can agents do the work of information security engineers?
We read the evidence for the whole job family, Security: Nearly all tasks (up from Not yet 12 months earlier)
Agents complete 90% or more of the tasks (or projects) on two direct benchmarks from independent institutions.
Evidence: Cybench, 100% of tasks completed; CyberGym, 99.2% of tasks completed.
7% of this occupation's work, by O*NET work activities, is measured by a direct benchmark (figures for the SOC 15-1299 group).
- 8%Develop operational or technical procedures or standardsNot measured
- 6%Advise others on the design or use of technologiesNot measured
- 5%Direct scientific or technical activitiesNot measured
- 4%Present research or technical informationNot measured
- 4%Test performance of computer or information systemsMeasured
- 4%Analyze performance of systems or equipmentNot measured
- 4%Evaluate the characteristics, usefulness, or performance of products or technologiesNot measured
- 4%Design computer or information systems or applicationsNot measured
Benchmarks for this occupation
These benchmarks name this occupation in their job mapping.
Direct evidence
Work benchmarks mapped primary to this family. They set the step when they report how many tasks agents complete.
Benchmarks for the job family
These cover work in security, not always this occupation's tasks.
Direct evidence
Work benchmarks mapped primary to this family. They set the step when they report how many tasks agents complete.
- 22Claude Mythos Preview (early checkpoint) · 13 Apr 2026Strong
- ARTEMIS live penetration test (agents vs. professionals)by Stanford University, Carnegie Mellon University and Gray Swan AI95.2ARTEMIS A2 (ensemble supervisor, Claude Sonnet 4 sub-agents) · 10 Dec 2025Strong
Also relevant
These benchmarks cover part of this family's work, or have no result yet. They do not set its step.
- 64.8%Claude Code + Opus 5.5 (max) · 6 Oct 2026Strong
Context only
These benchmarks span many occupations, or they test how agents behave. They give context but do not set the step.
Typical tasks
From O*NET 31.0. Core tasks first. Few of these tasks have a benchmark today.
- Identify security system weaknesses, using penetration tests.
- Coordinate monitoring of networks or systems for security breaches or intrusions.
- Assess the quality of security controls, using performance indicators.
- Train staff on, and oversee the use of, information security standards, policies, and best practices.
- Scan networks, using vulnerability assessment tools to identify vulnerabilities.
- Develop response and recovery strategies for security breaches.
- Conduct investigations of information security breaches to identify vulnerabilities and evaluate the damage.
- Develop or install software, such as firewalls and data encryption programs, to protect sensitive information.
- Oversee development of plans to safeguard computer files against accidental or unauthorized modification, destruction, or disclosure or to meet emergency data processing needs.
- Identify or implement solutions to information security problems.
- Develop information security standards and best practices.
- Recommend information security enhancements to management.
Other job titles for this occupation (48)
BISO (Business Information Security Officer) · Cloud Engineer · Engineer · Information Security Auditor · Information Security System Engineer · Infrastructure Security Engineer · Security Analyst · Security Data Scientist · Security Engineer · Systems Engineer · AI Security Specialist (Artificial Intelligence Security Specialist) · Application Security Administrator (Application Security Admin) · Application Security Engineer · Automotive Security Engineer · Cloud Security Architect · Cloud Security Engineer · Communications Security Manager (COMSEC Manager) · Cyber Defense Incident Responder · Cyber Defense Infrastructure Support Specialist · Cybersecurity Architect · Cybersecurity Engineer · Cybersecurity Hardware Engineer · Cybersecurity Software Developer · Cybersecurity Software Engineer · Cybersecurity Systems Engineer · Cybersecurity Threat Engineer · Identity and Access Management Manager (IAM Manager) · Information Assurance Engineer · Information Security Administrator (Information Security Admin) · Information Security Architect · Information Security Consultant · Information Security Engineer · Information Security Loss Prevention Engineer · Information Security Management Engineer · IS Security Developer (Information Systems Security Developer) · IS Security Engineer (Information Systems Security Engineer) · IS Security Scientist (Information Systems Security Scientist) · IT Administrator (Information Technology Administrator) · IT Architect (Information Technology Architect) · IT Security Engineer (Information Technology Security Engineer) · Mobile Security Engineer · Network Engineer · Network Security Engineer · Product Security Engineer · Security Administrator (Security Admin) · Security Architect · System Security Analyst · Systems Security Engineer