Computer Occupations

How to become an Information Security Engineer

Official title: Information Security Engineers

Also called: BISO (Business Information Security Officer), Cloud Engineer, Engineer, Information Security Auditor, Information Security System Engineer, Infrastructure Security Engineer, Security Analyst, Security Data Scientist, Security Engineer, Systems Engineer

Develop and oversee the implementation of information security procedures and policies. Build, maintain and upgrade security technology, such as firewalls, for the safe use of computer networks and the transmission and retrieval of information. Design and implement appropriate security controls to identify vulnerabilities and protect digital files and electronic infrastructures. Monitor and respond to computer security breaches, viruses, and intrusions, and perform forensic investigation. May oversee the assessment of information security systems.

Main tasks

Identify security system weaknesses, using penetration tests.
Coordinate monitoring of networks or systems for security breaches or intrusions.
Assess the quality of security controls, using performance indicators.
Train staff on, and oversee the use of, information security standards, policies, and best practices.
Scan networks, using vulnerability assessment tools to identify vulnerabilities.
Develop response and recovery strategies for security breaches.
Conduct investigations of information security breaches to identify vulnerabilities and evaluate the damage.
Develop or install software, such as firewalls and data encryption programs, to protect sensitive information.

How to become one

Typical education to start: Bachelor's degree

Ways in

Apprenticeship: Cyber Defense Incident Responder.
College: Engineering degrees, Offered by 36 universities in the US

Pay · Outlook · AI and this job

Median pay: $116,580 a year The middle half earn $79,370 to $157,500.
About 471,200 people work in this job now, and about 495,300 are projected by 2035. (+5.1%)
People already use generative AI for a good share of this work, which usually changes the job more than it replaces it. Microsoft Research rates its AI applicability as high.

Questions people ask

How do I become an Information Security Engineer?

Ways in include: Engineering degrees; Cyber Defense Incident Responder.

How much does an Information Security Engineer earn in the US?

Median full-time pay is $116,580 a year (U.S. Bureau of Labor Statistics). The middle half earn $79,370 to $157,500.

Is an Information Security Engineer a growing career in the US?

Yes. Employment is projected to grow 5% by 2035, from about 471,200 to about 495,300 people (U.S. Bureau of Labor Statistics).

Do you need a degree to become an Information Security Engineer?

Not always. 57% of people in this job hold a bachelor's degree or higher. Ways in include: Engineering degrees; Cyber Defense Incident Responder.

Will AI change the work of an Information Security Engineer?

People already use generative AI for a good share of this work, which usually changes the job more than it replaces it. Microsoft Research rates its AI applicability as high.

Sources

Microsoft Research: Working with AI: AI applicability by occupation (2025-12-22 (built on O*NET 29.0)), CC BY 4.0, retrieved 2026-10-03
U.S. Bureau of Labor Statistics: Employment Projections (2025-35 (released 2026-08-27)), Public domain (BLS), retrieved 2026-10-03
U.S. Bureau of Labor Statistics: Occupational Employment and Wage Statistics (May 2025), Public domain (BLS), retrieved 2026-10-03

Updated 2026-10-03

This page includes information from the O*NET 31.0 Database by the U.S. Department of Labor, Employment and Training Administration (USDOL/ETA). Used under the CC BY 4.0 license. O*NET is a trademark of USDOL/ETA.