Information Security Engineers
Computer and Mathematical Occupations- O*NET-SOC code
- 15-1299.05
Develop and oversee the implementation of information security procedures and policies. Build, maintain and upgrade security technology, such as firewalls, for the safe use of computer networks and the transmission and retrieval of information. Design and implement appropriate security controls to identify vulnerabilities and protect digital files and electronic infrastructures. Monitor and respond to computer security breaches, viruses, and intrusions, and perform forensic investigation. May oversee the assessment of information security systems.
- Data source: BLSPublished: 2026-08
Very high· relative
LowFour relative bandsVery highGroup-level value
Scale, basis and source
Four relative bands (Low / Moderate / High / Very high)
831 detailed occupations in the BLS Employment Projections table. Assigned per National Employment Matrix (NEM) code, so occupations sharing a NEM code carry the same band
- Data source: AnthropicPublished: 2026-03
0.311
0.000Range of values carried here0.745Group-level value
Scale, basis and source
Observed exposure index, 0–1 as published
Mapped onto O*NET tasks
Published per SOC 2018 occupation; every O*NET occupation with the same SOC 2018 code carries this value
- Data source: ILOPublished: 2025
0.43–0.55· 3 ISCO-08 groups
Scale, basis and source
Generative AI exposure index, 0–1 as published
Published per ISCO-08 unit group. Linked to this occupation, wholly or in part, by applying U.S. Bureau of Labor Statistics crosswalks (ISCO-08 to 2010 SOC, 2010 SOC to 2018 SOC) as published
What kind of figure this source publishes
The BLS category is a relative rank, not an absolute level, and it is not a first-hand measurement: it groups an occupation's percentile ranks across several published studies into four bands. It is not an employment or wage forecast, not a probability of adoption, and it does not separate automation from augmentation.
ILO value for each linked ISCO-08 group
- ISCO-08 2519Software and Applications Developers and Analysts Not Elsewhere Classified0.55
- ISCO-08 2529Database and Network Professionals Not Elsewhere Classified0.49
- ISCO-08 3511Information and Communications Technology Operations Technicians0.43
Task-level exposure
20 rated tasks · 20 tasks with β ≥ 0.5 (100.0%)
β = direct exposure (E1) + 0.5 × exposure when tools are available (E2), per the source repository's definition.
- Source unit: O*NET 27.2 tasks → O*NET 31.0 occupation code
- All rated tasks are in the O*NET 31.0 task list.
- Source
- OpenAI "GPTs are GPTs" exposure rubric
- Release
- gh-main-0471612
- License
- MIT License, Copyright (c) 2024 OpenAI
Values in this tab are predicted labels, not observations. Eloundou et al. (2023) published two rating regimes — human raters and GPT-4 — and the β shown here is derived from the GPT-4 rater basis alone; the same task can take a different value under the other regime. The unit and the meaning differ from the observed shares (%) in the other tabs, so do not place them on the same axis.
| Task (O*NET 27.2) | βE1 + 0.5 × E2 |
|---|---|
Coordinate documentation of computer security or emergency measure policies, procedures, or tests.O*NET Task ID 21768 | 1.0 |
Develop information security standards and best practices.O*NET Task ID 21771 | 1.0 |
Develop or implement software tools to assist in the detection, prevention, and analysis of security threats.O*NET Task ID 21772 | 1.0 |
Develop or install software, such as firewalls and data encryption programs, to protect sensitive information.O*NET Task ID 21773 | 1.0 |
Identify security system weaknesses, using penetration tests.O*NET Task ID 21776 | 1.0 |
Troubleshoot security and network problems.O*NET Task ID 21784 | 1.0 |
Write reports regarding investigations of information security breaches or network evaluations.O*NET Task ID 21785 | 1.0 |
Assess the quality of security controls, using performance indicators.O*NET Task ID 21766 | 0.5 |
Conduct investigations of information security breaches to identify vulnerabilities and evaluate the damage.O*NET Task ID 21767 | 0.5 |
Coordinate monitoring of networks or systems for security breaches or intrusions.O*NET Task ID 21769 | 0.5 |
Coordinate vulnerability assessments or analysis of information security systems.O*NET Task ID 21770 | 0.5 |
Develop response and recovery strategies for security breaches.O*NET Task ID 21774 | 0.5 |
Identify or implement solutions to information security problems.O*NET Task ID 21775 | 0.5 |
Oversee development of plans to safeguard computer files against accidental or unauthorized modification, destruction, or disclosure or to meet emergency data processing needs.O*NET Task ID 21777 | 0.5 |
Oversee performance of risk assessment or execution of system tests to ensure the functioning of data processing activities or security measures.O*NET Task ID 21778 | 0.5 |
Provide technical support to computer users for installation and use of security products.O*NET Task ID 21779 | 0.5 |
Recommend information security enhancements to management.O*NET Task ID 21780 | 0.5 |
Review security assessments for computing environments or check for compliance with cybersecurity standards and regulations.O*NET Task ID 21781 | 0.5 |
Scan networks, using vulnerability assessment tools to identify vulnerabilities.O*NET Task ID 21782 | 0.5 |
Train staff on, and oversee the use of, information security standards, policies, and best practices.O*NET Task ID 21783 | 0.5 |
β = E1 + 0.5 × E2 · E1 = tasks where direct LLM access alone cuts time by at least 50%, E2 = tasks where software built on top of an LLM cuts time by at least 50%. Values take only 0 / 0.5 / 1.0.
Data sources & licenses — O*NET®, Eloundou et al. (2023): see full notices on the Credits page
All O*NET 31.0 task statements (20)
All O*NET 31.0 task statements for this occupation (English, as published; task type core or supplemental). Exposure values are not listed here; they are in the table above, next to each task statement as worded in the O*NET version each source used.
| Task (O*NET 31.0) | Type |
|---|---|
| Assess the quality of security controls, using performance indicators. | Core |
| Conduct investigations of information security breaches to identify vulnerabilities and evaluate the damage. | Core |
| Coordinate documentation of computer security or emergency measure policies, procedures, or tests. | Core |
| Coordinate monitoring of networks or systems for security breaches or intrusions. | Core |
| Coordinate vulnerability assessments or analysis of information security systems. | Core |
| Develop information security standards and best practices. | Core |
| Develop or implement software tools to assist in the detection, prevention, and analysis of security threats. | Core |
| Develop or install software, such as firewalls and data encryption programs, to protect sensitive information. | Core |
| Develop response and recovery strategies for security breaches. | Core |
| Identify or implement solutions to information security problems. | Core |
| Identify security system weaknesses, using penetration tests. | Core |
| Oversee development of plans to safeguard computer files against accidental or unauthorized modification, destruction, or disclosure or to meet emergency data processing needs. | Core |
| Oversee performance of risk assessment or execution of system tests to ensure the functioning of data processing activities or security measures. | Core |
| Provide technical support to computer users for installation and use of security products. | Core |
| Recommend information security enhancements to management. | Core |
| Review security assessments for computing environments or check for compliance with cybersecurity standards and regulations. | Core |
| Scan networks, using vulnerability assessment tools to identify vulnerabilities. | Core |
| Train staff on, and oversee the use of, information security standards, policies, and best practices. | Core |
| Troubleshoot security and network problems. | Core |
| Write reports regarding investigations of information security breaches or network evaluations. | Core |
0.00/ 3· Robot exposure index
Scale, basis and source
Each physical task is graded 0–3 by the setting in which robots that have been deployed, sold or demonstrated could do it (0 none · 1 purpose-built robot settings such as a fenced machine cell or a bottling line · 2 structured facilities such as a hospital pharmacy or a container port · 3 unstructured settings such as a private home or a construction site), and the grades are averaged by share of working time
Physical tasks among this occupation's O*NET 29.3 tasks
Anthropic estimated the grades and time shares with Claude Opus 5 using web search, as of 2026.
The robot exposure index is a different measure from the AI exposure figures on this site and cannot be added to or compared with them. It does not measure actual adoption or cost, and 0 also covers occupations with no physical tasks.
Tier of each physical task
None of this occupation's O*NET 29.3 tasks is classified as a physical task.
Occupation information
Employment outlook (BLS)
Values for the whole SOC 15-1299 group (Computer occupations, all other), not for this O*NET occupation alone.
- Employment, 2025
- 471K
- Projected employment, 2035
- 495K
- Change (2025–35)
- +5.1%
- Median annual wage, 2025
- $116,580
- Typical education needed for entry
- Bachelor's degree
Korea classification links (KSCO)
Links from the current release of the Korea Occupation Direct Crosswalk v1.1, made by AI Changing Work. Relation values are read from the O*NET-SOC occupation side.
| KSCO code | KSCO title | Relation | Status |
|---|---|---|---|
| 22320 | 정보 보안 전문가 | This occupation is narrower | confirmed |
Relation and status definitions(kr-direct v1.1)
ILO occupational description
AI Changing Work links the ISCO-08 unit groups below to this occupation by applying the U.S. Bureau of Labor Statistics crosswalks (2018 SOC to 2010 SOC, 2010 SOC to ISCO-08) as published, without case-by-case selection; each link may be whole or partial.
- ISCO-08 2519Software and Applications Developers and Analysts Not Elsewhere Classified
- ISCO-08 2529Database and Network Professionals Not Elsewhere Classified
- ISCO-08 3511Information and Communications Technology Operations Technicians
Sources: ILO ISCO-08 — details: Credits
ESCO occupational vocabulary
Each entry below is matched to this occupation in the published ESCO-O*NET Crosswalk (version 1, 2022). The match types are that crosswalk's; the wording is AI Changing Work's.
- ICT security administratorESCO 2529.5Overlapping, not the same
ICT security administrators plan and carry out security measures to protect information and data from unauthorised access, deliberate attack, theft and corruption.
- ICT security managerESCO 2529.7Overlapping, not the same
ICT security managers propose and implement necessary security updates. They advise, support, inform and provide training and security awareness and take direct action on all or part of a network or system.
- ICT security technicianESCO 3512.3Overlapping, not the same
ICT security technicians propose and implement necessary security updates and measures whenever is required. They advise, support, inform and provide training and security awareness.
Source: European Commission, DG EMPL — ESCO API 2026-08-08 (bridge v1.2.1)
License: CC BY 4.0 (EU Reuse Notice)
ESCO reuse terms and the modification notice are in Credits.
France classification links (ROME)
AI Changing Work's links between this occupation and ROME 4.0 job profiles, judged with AI models. Relations are read from this occupation's side. Links marked “provisional” were adopted on the judgments of two judges from the same model family (Claude) alone, or by an operator rule applied to their judgments, so they rest on weaker evidence than confirmed links.
| ROME code | ROME title (French) | Relation |
|---|---|---|
| M1846 | Ingénieur / Ingénieure Cybersécurité Datacenter | This occupation is broader |
| M1833 | Ingénieur / Ingénieure sécurité web | This occupation is broaderprovisional |
| M1856 | Expert / Experte en cybersécurité | This occupation is broaderprovisional |
| M1882 | Architecte sécurité informatique | This occupation is broaderprovisional |
| M1817 | Administrateur / Administratrice sécurité informatique | Overlapping, not the sameprovisional |
Source: France Travail — Répertoire Opérationnel des Métiers et des Emplois (ROME 4.0), version 61, last updated 15 June 2026 (https://www.data.gouv.fr/datasets/repertoire-operationnel-des-metiers-et-des-emplois-rome). Licence Ouverte 2.0.
ROME codes and titles are reproduced unchanged; the links to O*NET-SOC occupations are AI Changing Work's own judgment and are not a France Travail correspondence.
(AI Changing Work link release: fr-direct v1)
Spain classification links (CNO-11)
AI Changing Work's links between this occupation and CNO-11 occupations, judged with AI models. Relations are read from this occupation's side.
| CNO-11 code | CNO-11 title (Spanish) | Relation |
|---|---|---|
| 2729 | Especialistas en bases de datos y en redes informáticas no clasificados bajo otros epígrafes | This occupation is narrower |
Source: Instituto Nacional de Estadística (INE), National Classification of Occupations 2011 (CNO-11, Royal Decree 1591/2010) — www.ine.es · Licensed CC BY 4.0. CNO-11 codes and Spanish titles are reproduced unchanged; the links to O*NET occupations are AI Changing Work's own judgment and are not an INE correspondence.
(AI Changing Work link release: es-direct v1)
Germany classification links (KldB)
AI Changing Work's links between this occupation and KldB occupations, judged with AI models. Relations are read from this occupation's side.
| KldB code | KldB title (German) | Relation |
|---|---|---|
| 43383 | Berufe in der IT-Netzwerktechnik, IT-Koordination, IT-Administration und IT-Organisation (sonstige spezifische Tätigkeitsangabe) - komplexe Spezialistentätigkeiten | This occupation is broader |
| 43384 | Berufe in der IT-Netzwerktechnik, IT-Koordination, IT-Administration und IT-Organisation (sonstige spezifische Tätigkeitsangabe) - hoch komplexe Tätigkeiten | Overlapping, not the same |
Source: © Statistik der Bundesagentur für Arbeit — Klassifikation der Berufe 2010 – überarbeitete Fassung 2020, https://statistik.arbeitsagentur.de. KldB codes and titles are reproduced unchanged; the links to O*NET occupations are AI Changing Work's own mapping (eigene Zuordnung) and are not a Bundesagentur für Arbeit correspondence.
(AI Changing Work link release: de-direct v1)
Japan classification links (JSCO)
AI Changing Work's links between this occupation and JSCO occupations, judged with AI models. Relations are read from this occupation's side.
| JSCO code | JSCO title (Japanese) | Relation |
|---|---|---|
| 105 | システム運用管理者 | This occupation is narrower |
| 109 | その他の情報処理・通信技術者 | Related, not a match |
Source: Ministry of Internal Affairs and Communications (MIC), Japan Standard Occupational Classification (Dec. 2009, MIC Notification No. 555). JSCO codes and Japanese titles are reproduced unchanged; the links to O*NET occupations are AI Changing Work's own judgment and are not a MIC correspondence.
(AI Changing Work link release: jp-direct v1)
Sources, licenses and AI Changing Work's modification and translation notices for this page: Credits & sources