Information Security Engineer Job Description

 infosec engineer

Information Security Engineers, also called Information Security Analysts, help to safeguard organization’s computer networks and systems. They plan and carry out security measures to monitor and protect sensitive data and systems from infiltration and cyber-attacks. Information Security Engineers usually work as part of a larger IT team and report directly to upper management.

As sensitive data is more frequently stored on computer systems, and hacking and cyber-attacks grow more frequent, companies and governments are increasingly relying on Information Security Engineers. The Bureau of Labor Statistics expects an 18 percent increase in jobs for Information Security Engineers through 2024, a rate much faster than the average job growth in all other sectors.

 

Information Security Engineer Duties and Responsibilities

To accomplish their primary goal of protecting computer systems and networks, Information Security Engineers perform many tasks. We analyzed several job listings to identify these core Information Security Engineers duties and responsibilities.

Develop Information Security Plans and Policies

Information Security Engineers help plan and carry out an organization’s information security strategy. They develop a set of security standards and best practices for the organization, and recommend security enhancements to management as needed. They develop strategies to respond to and recover from a security breach. Information Security Engineers are also responsible for educating the workforce on information security through training and building awareness.

Implement Protections

Information Security Engineers install and use software, such as firewalls and data encryption programs, to protect organizations’ sensitive information. They also assist computer users with installation or processing of new security products and procedures.

Test for Vulnerabilities

An Information Security Engineer conducts periodic scans of networks to find any vulnerability. They also conduct penetration testing, in which they simulate an attack on the system to highlight or find any weaknesses that might be exploited by a malicious party.

Monitor for Security Breaches

Information Security Engineers must constantly monitor their organization’s networks and systems for security breaches or intrusions. They install software that helps to notify them of intrusions, and watch out for irregular system behavior.

Investigate Security Breaches

If a breach has occurred, the Information Security Engineer leads incident response activities to minimize the impact. Afterwards, they lead a technical and forensic investigation into how the breach happened and the extent of the damage. They prepare reports of their findings to be reported to management.

 

Information Security Engineer Skills

A strong multi-tasker with a keen eye for detail, a successful Information Security Engineer can think one step ahead of criminals. They are well organized and thrive in fast-paced, high-stress scenarios. In addition to these general skills and personality traits, employers are seeking Information Security Engineer candidates with the following skills.

Core skills: Based on job listings we looked at, employers want Information Security Engineer with these core skills. If you want to work as an Information Security Engineer focus on the following.

• Direct experience with anti-virus software, intrusion detection, firewalls and content filtering
• Knowledge of risk assessment tools, technologies and methods
• Experience designing secure networks, systems and application architectures
• Knowledge of disaster recovery, computer forensic tools, technologies and methods
• Experience planning, researching and developing security policies, standards and procedures
• Professional experience in a system administration role supporting multiple platforms and applications
• Ability to communicate network security issues to peers and management
• Ability to read and use the results of mobile code, malicious code, and anti-virus software

Advanced skills: While most employers did not require the following skills, multiple job listings included them as preferred. Add these to your Information Security Engineer toolbox and broaden your career options.