Guidance.help

Information Security Engineers

The occupation Information Security Engineers covers people who develop and oversee the implementation of information security procedures and policies. One core duty is to identify security system weaknesses, using penetration tests. On the six-type interest model it reads CIR, meaning orderly work with data, records and clear procedures comes first, followed by research, analysis and working through hard problems. Plan on a bachelor’s degree plus a period of work experience; O*NET labels this considerable preparation. Strength in reading comprehension, critical thinking, and active listening helps most here. The job can ask you to coordinate monitoring of networks or systems for security breaches or intrusions. If you want orderly work with data, records and clear procedures, keep it on your list. If you need creative work with room for original expression, it may feel thin.

What they do

Develop and oversee the implementation of information security procedures and policies. Build, maintain and upgrade security technology, such as firewalls, for the safe use of computer networks and the transmission and retrieval of information. Design and implement appropriate security controls to identify vulnerabilities and protect digital files and electronic infrastructures. Monitor and respond to computer security breaches, viruses, and intrusions, and perform forensic investigation. May oversee the assessment of information security systems.

Main tasks

  • Identify security system weaknesses, using penetration tests.
  • Coordinate monitoring of networks or systems for security breaches or intrusions.
  • Assess the quality of security controls, using performance indicators.
  • Train staff on, and oversee the use of, information security standards, policies, and best practices.
  • Scan networks, using vulnerability assessment tools to identify vulnerabilities.
  • Develop response and recovery strategies for security breaches.

Skills

  • Reading Comprehension
  • Critical Thinking
  • Active Listening
  • Writing
  • Monitoring
  • Speaking

Who this career fits

May suit you if

  • You like clear rules and getting the details right.
  • You enjoy working out why something happens, not just what happened.
  • You are ready to spend around four years on a degree, then build experience.
  • You are comfortable relying on reading comprehension and critical thinking.

May not suit you if

  • You get restless with routine, records and exact procedures.
  • You need creative expression to be a big part of your day. Artistic rates 1.3 out of 7 here.
  • You want to avoid a four-year degree or its equivalent.

Interest profile

O*NET rates each occupation from 1 to 7 on six interest types. The code CIR takes the three highest, and Conventional comes first here.

Preparation

Considerable preparation. Most jobs here ask for a bachelor’s degree, and employers usually expect a few years of related experience as well.

Most-reported requirement in the O*NET survey: Bachelor's Degree. This reflects what workers reported most often and is not a legal minimum. Licensing rules can differ by state or industry, so confirm what applies where you plan to work.

Also called

  • BISO (Business Information Security Officer)
  • Cloud Engineer
  • Engineer
  • Information Security Auditor
  • Information Security System Engineer

Related careers

Is this your direction?

See how your interests line up with CIR and 906 other careers.

Take the career test

This page includes information from the O*NET 31.0 Database by the U.S. Department of Labor, Employment and Training Administration (USDOL/ETA). Used under the CC BY 4.0 license. O*NET® is a trademark of USDOL/ETA.