Develop and oversee the implementation of information security procedures and policies. Build, maintain and upgrade security technology, such as firewalls, for the safe use of computer networks and the transmission and retrieval of information. Design and implement appropriate security controls to identify vulnerabilities and protect digital files and electronic infrastructures. Monitor and respond to computer security breaches, viruses, and intrusions, and perform forensic investigation. May oversee the assessment of information security systems.
SOC: 15-1299.05
What You'll Need to Succeed
AI-generated
Key competencies for this occupation at a glance
KnowledgeDesign comprehensive security architectures and controls for network and application environments using cloud platforms (AWS, Azure, Google Cloud) and on-premises infrastructure to protect digital assets.
Advanced
KnowledgeFormulate custom security solutions and countermeasures using programming languages (Java, C++, Go, Ruby) to address emerging threats and zero-day vulnerabilities.
Advanced
KnowledgeAnalyze security vulnerabilities and threat vectors across systems and networks using SIEM tools (Splunk, QRadar, ArcSight) and vulnerability scanners to identify risks.
Proficient
Hands-onExecute security incident response procedures and forensic investigations during active security breaches and intrusions using packet analysis tools (Wireshark, Tcpdump) and IDS/IPS systems.
Proficient
Hands-onOperate infrastructure-as-code and automation tools deploying and managing security controls across environments using Terraform, Ansible, Docker, and Kubernetes.
Proficient
KnowledgeDevelop security policies, procedures, and standards aligned with regulatory requirements and industry frameworks, collaborating with cross-functional teams.
Proficient
Hands-onPerform security monitoring and threat hunting activities using scripting languages (Python, Bash, PowerShell) to automate detection and response workflows.
Proficient
KnowledgeAssess security posture of information systems and infrastructure conducting penetration tests and security audits using vulnerability assessment tools (Nessus, Snort).
Proficient
MindsetAdvocate security best practices and risk awareness communicating technical security concepts to stakeholders and influencing organizational security culture.
Proficient
Hands-onManipulate firewall configurations and network security devices implementing defense-in-depth strategies across multiple platforms (Linux, Windows, macOS) and network protocols (BGP).
Developing
Wage Data According to the Bureau of Labor Statistics
Annual wage data for Information Security Engineers (2024)
Estimated Total Employment (U.S.)
439,380
Wage Distribution by Percentile
Line chart of annual wages by percentile. U.S. is the solid line. 10th percentile: U.S. $52,650. 25th percentile: U.S. $76,360. 50th percentile: U.S. $108,970. 75th percentile: U.S. $147,530. 90th percentile: U.S. $176,800. Use the left and right arrow keys to move between percentiles.
U.S.
Metric
U.S.
10% of workers earn the following or less
$52,650
10% of workers earn the following or more
$176,800
Workers on average earn
$116,700
+ indicates wage is at or above the BLS reporting cap ($239,200/year)
Tools & Technology
Equipment and software commonly used in this occupation
