Information Security Engineers

Computer and Mathematical Occupations
O*NET-SOC 代码
15-1299.05

Develop and oversee the implementation of information security procedures and policies. Build, maintain and upgrade security technology, such as firewalls, for the safe use of computer networks and the transmission and retrieval of information. Design and implement appropriate security controls to identify vulnerabilities and protect digital files and electronic infrastructures. Monitor and respond to computer security breaches, viruses, and intrusions, and perform forensic investigation. May oversee the assessment of information security systems.

  • 数据来源: BLS发布时间: 2026-08

    很高· 相对

    低四级相对区间很高

    职业群单位数值

    尺度 · 母数 · 来源

    四级相对类别（低 / 中等 / 高 / 很高）

    以BLS就业预测表中831个细分职业为基数。取值按 NEM（全国就业矩阵）代码给定，因此共用同一 NEM 代码的职业得到相同分档

    来源数据集（XLSX 文件下载）

  • 数据来源: Anthropic发布时间: 2026-03

    0.311

    0.000此处所载数值的范围0.745

    职业群单位数值

    尺度 · 母数 · 来源

    观测暴露度指数，按发布原值0–1

    以O*NET任务映射为基准

    按 SOC 2018 职业发布的数值；具有相同 SOC 2018 代码的所有 O*NET 职业均显示此值

    来源数据集（CSV 文件下载）

  • 数据来源: ILO发布时间: 2025

    0.43–0.55· ISCO-08 职业组 3 个

    尺度 · 母数 · 来源

    生成式AI暴露度指数，按发布原值0–1

    按 ISCO-08 细类（4 位）发布的数值。按原样应用美国劳工统计局（BLS）的官方对照表（ISCO-08→2010 SOC、2010 SOC→2018 SOC）关联到本职业，对应关系为全部或部分对应

    来源数据集（PDF 文件下载）

该来源发布的是什么性质的数值

BLS的类别是相对排位而非绝对水平，也不是一手测量：它把多项已发表研究给出的职业百分位排名归并为四个等级。它不是就业或工资预测，不是采用概率，也不区分自动化与增强。

各关联 ISCO-08 职业组的 ILO 数值
  • ISCO-08 2519Software and Applications Developers and Analysts Not Elsewhere Classified0.55
  • ISCO-08 2529Database and Network Professionals Not Elsewhere Classified0.49
  • ISCO-08 3511Information and Communications Technology Operations Technicians0.43

Task-level exposure

仅显示有暴露的工作

已评分任务 20 项 · β ≥ 0.5 的任务 20 项（100.0%）

β = 直接暴露（E1）+ 0.5 × 借助工具时的暴露（E2），依据原始代码库的定义。

  • 原始单位：O*NET 27.2 任务 → O*NET 31.0 职业代码
  • 所有已评分任务均在 O*NET 31.0 任务列表中。
来源
OpenAI "GPTs are GPTs" exposure rubric
版本
gh-main-0471612
许可
MIT License, Copyright (c) 2024 OpenAI
Task (O*NET 30.2)Claude.aiRaw / share %APIRaw / share %
Provide technical support to computer users for installation and use of security products.

15-1299.05

0.050045.50.01007.7
Develop or implement software tools to assist in the detection, prevention, and analysis of security threats.

15-1299.05

0.020018.20.020015.4
Identify or implement solutions to information security problems.

15-1299.05

0.01009.10.030023.1
Develop or install software, such as firewalls and data encryption programs, to protect sensitive information.

15-1299.05

0.01009.10.020015.4
Recommend information security enhancements to management.

15-1299.05

0.01009.10.01007.7
Troubleshoot security and network problems.

15-1299.05

0.01009.10.01007.7
Conduct investigations of information security breaches to identify vulnerabilities and evaluate the damage.

15-1299.05

0.00000.00.01007.7
Review security assessments for computing environments or check for compliance with cybersecurity standards and regulations.

15-1299.05

0.00000.00.01007.7
Write reports regarding investigations of information security breaches or network evaluations.

15-1299.05

0.00000.00.00000.0
Train staff on, and oversee the use of, information security standards, policies, and best practices.

15-1299.05

0.00000.0—0
Assess the quality of security controls, using performance indicators.
—00.01007.7
Scan networks, using vulnerability assessment tools to identify vulnerabilities.
—00.00000.0
Not observed on any surface — 8 task(s) — These tasks have no row in the source for this release. The 0 in the share row is a display-stage composition ratio; absence is what the — in the raw row states.
Coordinate documentation of computer security or emergency measure policies, procedures, or tests.
—0—0
Coordinate monitoring of networks or systems for security breaches or intrusions.
—0—0
Coordinate vulnerability assessments or analysis of information security systems.
—0—0
Develop information security standards and best practices.
—0—0
Develop response and recovery strategies for security breaches.
—0—0
Identify security system weaknesses, using penetration tests.
—0—0
Oversee development of plans to safeguard computer files against accidental or unauthorized modification, destruction, or disclosure or to meet emergency data processing needs.
—0—0
Oversee performance of risk assessment or execution of system tests to ensure the functioning of data processing activities or security measures.
—0—0

Data sources & licenses — O*NET®, Anthropic Economic Index, Eloundou et al. (2023): see full notices on the Credits page

O*NET 31.0 全部任务（20 项）

本职业在 O*NET 31.0 中的全部任务（英文原文；任务类型为核心或补充）。暴露值不列在此清单中，而在上方表格里，位于各来源所用 O*NET 版本的任务表述旁。

任务（O*NET 31.0）类型
Assess the quality of security controls, using performance indicators.核心
Conduct investigations of information security breaches to identify vulnerabilities and evaluate the damage.核心
Coordinate documentation of computer security or emergency measure policies, procedures, or tests.核心
Coordinate monitoring of networks or systems for security breaches or intrusions.核心
Coordinate vulnerability assessments or analysis of information security systems.核心
Develop information security standards and best practices.核心
Develop or implement software tools to assist in the detection, prevention, and analysis of security threats.核心
Develop or install software, such as firewalls and data encryption programs, to protect sensitive information.核心
Develop response and recovery strategies for security breaches.核心
Identify or implement solutions to information security problems.核心
Identify security system weaknesses, using penetration tests.核心
Oversee development of plans to safeguard computer files against accidental or unauthorized modification, destruction, or disclosure or to meet emergency data processing needs.核心
Oversee performance of risk assessment or execution of system tests to ensure the functioning of data processing activities or security measures.核心
Provide technical support to computer users for installation and use of security products.核心
Recommend information security enhancements to management.核心
Review security assessments for computing environments or check for compliance with cybersecurity standards and regulations.核心
Scan networks, using vulnerability assessment tools to identify vulnerabilities.核心
Train staff on, and oversee the use of, information security standards, policies, and best practices.核心
Troubleshoot security and network problems.核心
Write reports regarding investigations of information security breaches or network evaluations.核心

职业信息

就业展望（BLS）

这些数值属于整个 SOC 15-1299 组（Computer occupations, all other），并非仅属于该 O*NET 职业。

就业人数，2025
471K
预计就业人数，2035
495K
变化 (2025–35)
+5.1%
年薪中位数，2025
$116,580
入职通常所需学历
Bachelor's degree
最低 $30,890BLS EP 2025–35 中 825 个细分职业的工资中位数范围最高 $559,030

来源: U.S. Bureau of Labor Statistics, Employment Projections 2025–35 — Employment by detailed occupation, 2025 and projected 2035

韩国职业分类关联（KSCO）

来自 AI Changing Work 制作的 Korea Occupation Direct Crosswalk v1.1 当前版本的关联。关系值从 O*NET-SOC 职业一侧解读。

KSCO 代码KSCO 名称关系状态
22320정보 보안 전문가本职业范围更窄已确认

关系与状态的定义(kr-direct v1.1)

国际劳工组织（ILO）职业说明

以下 ISCO-08 职业组由 AI Changing Work 原样套用美国劳工统计局（BLS）发布的对照表（2018 SOC→2010 SOC、2010 SOC→ISCO-08）、不逐案取舍，与本职业相关联；每项关联可能是完全对应，也可能是部分对应。

  • ISCO-08 2519Software and Applications Developers and Analysts Not Elsewhere Classified

    其他未列明的软件和应用开发人员及分析师

  • ISCO-08 2529Database and Network Professionals Not Elsewhere Classified

    其他未列明的数据库和网络专业人员

  • ISCO-08 3511Information and Communications Technology Operations Technicians

    信息和通信技术运行技术员

自行翻译

自行翻译 · 非 ISCO 官方词汇 — 未经国际劳工组织审核。

Sources: ILO ISCO-08 — details: Credits

ESCO 职业词汇

以下每一项都是在已公开的ESCO-O*NET Crosswalk（第 1 版，2022 年）中与本职业逐项对应的。对应类型出自该对照表；表述出自 AI Changing Work。

  • ICT security administratorESCO 2529.5有重叠，但不相同

    ICT security administrators plan and carry out security measures to protect information and data from unauthorised access, deliberate attack, theft and corruption.

  • ICT security managerESCO 2529.7有重叠，但不相同

    ICT security managers propose and implement necessary security updates. They advise, support, inform and provide training and security awareness and take direct action on all or part of a network or system.

  • ICT security technicianESCO 3512.3有重叠，但不相同

    ICT security technicians propose and implement necessary security updates and measures whenever is required. They advise, support, inform and provide training and security awareness.

来源: European Commission, DG EMPL — ESCO API 2026-08-08 (bridge v1.2.1)

许可: CC BY 4.0 (EU Reuse Notice)

查看原文

ESCO reuse terms and the modification notice are in Credits.

法国职业分类关联（ROME）

本职业与 ROME 4.0 职业条目（fiche）之间的关联，由 AI Changing Work 借助 AI 模型判定。关系从本职业一侧解读。标为「暂定」的关联仅凭同一模型系列（Claude）两位判定者的判定采纳，或对其判定适用运营方规则后采纳，因此其依据弱于已确认的关联。

ROME 代码ROME 名称（法语）关系
M1846Ingénieur / Ingénieure Cybersécurité Datacenter本职业范围更宽
M1833Ingénieur / Ingénieure sécurité web本职业范围更宽暂定
M1856Expert / Experte en cybersécurité本职业范围更宽暂定
M1882Architecte sécurité informatique本职业范围更宽暂定
M1817Administrateur / Administratrice sécurité informatique有重叠，但不相同暂定

Source: France Travail — Répertoire Opérationnel des Métiers et des Emplois (ROME 4.0), version 61, last updated 15 June 2026 (https://www.data.gouv.fr/datasets/repertoire-operationnel-des-metiers-et-des-emplois-rome). Licence Ouverte 2.0.

ROME codes and titles are reproduced unchanged; the links to O*NET-SOC occupations are AI Changing Work's own judgment and are not a France Travail correspondence.

(AI Changing Work link release: fr-direct v1)

西班牙职业分类关联（CNO-11）

本职业与 CNO-11 职业之间的关联，由 AI Changing Work 借助 AI 模型判定。关系从本职业一侧解读。

CNO-11 代码CNO-11 名称（西班牙语）关系
2729Especialistas en bases de datos y en redes informáticas no clasificados bajo otros epígrafes本职业范围更窄

Source: Instituto Nacional de Estadística (INE), National Classification of Occupations 2011 (CNO-11, Royal Decree 1591/2010) — www.ine.es · Licensed CC BY 4.0. CNO-11 codes and Spanish titles are reproduced unchanged; the links to O*NET occupations are AI Changing Work's own judgment and are not an INE correspondence.

(AI Changing Work link release: es-direct v1)

德国职业分类关联（KldB）

本职业与 KldB 职业之间的关联，由 AI Changing Work 借助 AI 模型判定。关系从本职业一侧解读。

KldB 代码KldB 名称（德语）关系
43383Berufe in der IT-Netzwerktechnik, IT-Koordination, IT-Administration und IT-Organisation (sonstige spezifische Tätigkeitsangabe) - komplexe Spezialistentätigkeiten本职业范围更宽
43384Berufe in der IT-Netzwerktechnik, IT-Koordination, IT-Administration und IT-Organisation (sonstige spezifische Tätigkeitsangabe) - hoch komplexe Tätigkeiten有重叠，但不相同

Source: © Statistik der Bundesagentur für Arbeit — Klassifikation der Berufe 2010 – überarbeitete Fassung 2020, https://statistik.arbeitsagentur.de. KldB codes and titles are reproduced unchanged; the links to O*NET occupations are AI Changing Work's own mapping (eigene Zuordnung) and are not a Bundesagentur für Arbeit correspondence.

(AI Changing Work link release: de-direct v1)

日本职业分类关联（JSCO）

本职业与 JSCO 职业之间的关联，由 AI Changing Work 借助 AI 模型判定。关系从本职业一侧解读。

JSCO 代码JSCO 名称（日语）关系
105システム運用管理者本职业范围更窄
109その他の情報処理・通信技術者相关，但不对应

Source: Ministry of Internal Affairs and Communications (MIC), Japan Standard Occupational Classification (Dec. 2009, MIC Notification No. 555). JSCO codes and Japanese titles are reproduced unchanged; the links to O*NET occupations are AI Changing Work's own judgment and are not a MIC correspondence.

(AI Changing Work link release: jp-direct v1)

本页数据的来源与许可，以及 AI Changing Work 的修改与翻译说明：致谢与来源