Information Security Engineers

Summary of What they do:

Develop and oversee the implementation of information security procedures and policies. Build, maintain and upgrade security technology, such as firewalls, for the safe use of computer networks and the transmission and retrieval of information. Design and implement appropriate security controls to identify vulnerabilities and protect digital files and electronic infrastructures. Monitor and respond to computer security breaches, viruses, and intrusions, and perform forensic investigation. May oversee the assessment of information security systems.

Tasks On The Job

1. Assess the quality of security controls, using performance indicators.
2. Conduct investigations of information security breaches to identify vulnerabilities and evaluate the damage.
3. Coordinate documentation of computer security or emergency measure policies, procedures, or tests.
4. Coordinate monitoring of networks or systems for security breaches or intrusions.
5. Coordinate vulnerability assessments or analysis of information security systems.
6. Develop information security standards and best practices.
7. Develop or implement software tools to assist in the detection, prevention, and analysis of security threats.
8. Develop or install software, such as firewalls and data encryption programs, to protect sensitive information.
9. Develop response and recovery strategies for security breaches.
10. Identify or implement solutions to information security problems.
11. Identify security system weaknesses, using penetration tests.
12. Oversee development of plans to safeguard computer files against accidental or unauthorized modification, destruction, or disclosure or to meet emergency data processing needs.
13. Oversee performance of risk assessment or execution of system tests to ensure the functioning of data processing activities or security measures.
14. Provide technical support to computer users for installation and use of security products.
15. Recommend information security enhancements to management.
16. Review security assessments for computing environments or check for compliance with cybersecurity standards and regulations.
17. Scan networks, using vulnerability assessment tools to identify vulnerabilities.
18. Train staff on, and oversee the use of, information security standards, policies, and best practices.
19. Troubleshoot security and network problems.
20. Write reports regarding investigations of information security breaches or network evaluations.