Information Security Analysts

What the job really is

Plan, implement, upgrade, or monitor security measures for the protection of computer networks and information. Assess system vulnerabilities for security risks and propose and implement risk mitigation strategies. May ensure appropriate security controls are in place that will safeguard digital files and vital electronic infrastructure. May respond to computer security breaches and viruses.

At a glance

• Sector: Computer & Mathematical
• O*NET-SOC code: 15-1212
• O*NET job zone: 4 — considerable preparation
• Work sample tasks on file: 11
• Tools and technologies listed: 12

What you actually do

Work sample tasks recorded for this occupation:

• Develop plans to safeguard computer files against accidental or unauthorized modification, destruction, or disclosure and to meet emergency data processing needs.
• Monitor current reports of computer viruses to determine when to update virus protection systems.
• Encrypt data transmissions and erect firewalls to conceal confidential information as it is being transmitted and to keep out tainted digital transfers.
• Perform risk assessments and execute tests of data processing system to ensure functioning of data processing activities and security measures.
• Modify computer security files to incorporate new software, correct errors, or change individual access status.
• Review violations of computer security procedures and discuss procedures with violators to ensure violations are not repeated.
• Document computer security and emergency measures policies, procedures, and tests.
• Confer with users to discuss issues such as computer data access needs, security violations, and programming changes.
• Monitor use of data files and regulate access to safeguard information in computer files.
• Coordinate implementation of computer system plan with establishment personnel and outside vendors.
• Train users and promote security awareness to ensure system security and to improve server and network efficiency.

Tools and technology

AJAX, Amazon DynamoDB, Amazon Elastic Compute Cloud EC2, Amazon Redshift, Amazon Web Services AWS CloudFormation, Amazon Web Services AWS software, Ansible software, Apache Cassandra, Apache Hadoop, Apache Hive, Apache Kafka, Apache Maven

What employers expect you to already be comfortable with.

Where this job leads

Related occupations — the usual moves up and sideways:

• Information Security Engineers
• Penetration Testers
• Digital Forensics Analysts
• Network and Computer Systems Administrators
• Computer Systems Analysts
• Computer Network Support Specialists
• Database Administrators
• Computer Systems Engineers/Architects

Getting in

O*NET assigns this occupation job zone 4 (considerable preparation). The related occupations above are the realistic routes in and out.

Find openings

Browse the verified job sources directory, or explore more occupations.

Check this against the source

O*NET OnLine: Information Security Analysts — the authoritative public-domain profile this page is derived from, including the full task list, reported skills and the wage estimates for your region.

Derived and rewritten from the public-domain O*NET database (U.S. Department of Labor / Employment and Training Administration). Figures are observations, not promises — always confirm salary, licensing and visa requirements with the employer and the relevant authority.