Information Security Engineers

Develop and oversee the implementation of information security procedures and policies. Build, maintain and upgrade security technology, such as firewalls, for the safe use of computer networks and the transmission and retrieval of information. Design and implement appropriate security controls to identify vulnerabilities and protect digital files and electronic infrastructures. Monitor and respond to computer security breaches, viruses, and intrusions, and perform forensic investigation. May oversee the assessment of information security systems.

Bright Outlook

Interest Profile (RIASEC)

Key Tasks

Assess the quality of security controls, using performance indicators.

Conduct investigations of information security breaches to identify vulnerabilities and evaluate the damage.

Coordinate documentation of computer security or emergency measure policies, procedures, or tests.

Coordinate monitoring of networks or systems for security breaches or intrusions.

Coordinate vulnerability assessments or analysis of information security systems.

Develop information security standards and best practices.

Develop or implement software tools to assist in the detection, prevention, and analysis of security threats.

Develop or install software, such as firewalls and data encryption programs, to protect sensitive information.

Develop response and recovery strategies for security breaches.

Identify or implement solutions to information security problems.

Identify security system weaknesses, using penetration tests.

Oversee development of plans to safeguard computer files against accidental or unauthorized modification, destruction, or disclosure or to meet emergency data processing needs.

Oversee performance of risk assessment or execution of system tests to ensure the functioning of data processing activities or security measures.

Provide technical support to computer users for installation and use of security products.

Recommend information security enhancements to management.

Review security assessments for computing environments or check for compliance with cybersecurity standards and regulations.

Scan networks, using vulnerability assessment tools to identify vulnerabilities.

Train staff on, and oversee the use of, information security standards, policies, and best practices.

Troubleshoot security and network problems.

Write reports regarding investigations of information security breaches or network evaluations.

Technology Skills

Operating system software

Apple iOS
Bash
Microsoft Windows Server
UNIX Shell

Project management software

Atlassian Confluence
Microsoft SharePoint
Microsoft Teams

Development environment software

Go
Microsoft Azure software
Microsoft PowerShell
Ruby

Object or component oriented development software

C#
Oracle Java
Perl
R

Data base user interface and query software

Amazon Web Services AWS software
IBM DB2
Microsoft SQL Server
ServiceNow

Web platform development software

JavaScript
JavaScript Object Notation JSON
PHP
React

Network monitoring software

IBM QRadar SIEM
Microsoft Azure Sentinel
Snort
Wireshark

Internet directory services software

Active directory software
Microsoft Active Directory
Network directory services software
Oracle Unified Directory

Configuration management software

Chef
IBM Terraform
Puppet

Application server software

Docker
GitHub
Kubernetes

Enterprise application integration software

Enterprise application integration EAI software
Jenkins CI
Microsoft SQL Server Integration Services SSIS

Data base management system software

Elasticsearch
MongoDB
NoSQL

Transaction security and virus protection software

Microsoft Defender Antivirus
Microsoft Security Esssentials
Tenable Nessus

Risk management data and analysis software

ArcSight Enterprise Threat and Risk Management
McAfee Enterprise Security Manager

Enterprise system management software

Splunk Enterprise
Tanium software

Network security or virtual private network VPN management software

IBM Resource Access Control Facility RACF
Intrusion detection system IDS

Data base reporting software

Microsoft SQL Server Reporting Services SSRS
Reporting software

Cloud-based management software

Amazon Web Services AWS CloudFormation
Google Cloud software

Spreadsheet software

Microsoft Excel

Geographic information system

Geographic information system GIS systems

Content workflow software

Atlassian JIRA

Authentication server software

Single sign-on SSO

Electronic mail software

Microsoft Outlook

Access software

IBM Tivoli software

Expert system software

Ansible software

Graphics or photo imaging software

Microsoft Visio

Enterprise resource planning ERP software

Management information systems MIS

File versioning software

Transaction server software

IBM Middleware

Office suite software

Microsoft Office software

Cloud-based data access and sharing software

Platform as a service PaaS

Word processing software

Collaborative editing software

Network security and virtual private network VPN equipment software

Firewall software

Presentation software

Microsoft PowerPoint

Switch or router software

Border Gateway Protocol BGP

Detailed Work Activities

Manage information technology projects or system activities.

Develop software or computer applications.

Install computer software.

Analyze security of systems, network, or data.

Coordinate reporting or editing activities.

Develop operating strategies, plans, or procedures.

Develop performance metrics or standards related to information technology.

Establish work standards.

Evaluate potential of products, technologies, or resources.

Evaluate utility of software or hardware technologies.

Implement security measures for computer or information systems.

Investigate illegal or suspicious activities.

Monitor processes for compliance with standards.

Provide technical guidance to other personnel.

Read documents to gather technical information.

Recommend changes to improve computer or information systems.

Supervise information technology personnel.

Test computer system operations to ensure proper functioning.

Train personnel in technical or scientific procedures.

Troubleshoot issues with computer applications or systems.

Write reports or evaluations.

Job Zone

Job Zone Four: Considerable Preparation Needed

Most of these occupations require a four-year bachelor's degree, but some do not.

A considerable amount of work-related skill, knowledge, or experience is needed for these occupations. For example, an accountant must complete four years of college and work for several years in accounting to be considered qualified.

Employees in these occupations usually need several years of work-related experience, on-the-job training, and/or vocational training.

Many of these occupations involve coordinating, supervising, managing, or training others. Examples include real estate brokers, sales managers, database administrators, graphic designers, conservation scientists, art directors, and cost estimators.

SVP Range: (7.0 to < 8.0)