Information Security Engineers
SOC code 15-1299 · O*NET-SOC 15-1299.05 · Considerable preparation needed · Computer and IT
Bright Outlook — O*NET expects rapid growth and new and emerging for this occupation
Information Security Engineers pay
U.S. national figures, May 2025 BLS survey · How we got this number
Median pay
$116,580
a year
Hourly
$56.05
per hour
The solid band is the middle 50% of workers; the bar spans the 10th to 90th percentile.
Average pay
$122,230
$58.77 per hour
Middle 50%
$79,370 – $157,500
25th to 75th percentile
Full spread
$55,940 – $188,470
10th to 90th percentile
People employed
435,370
nationwide
National U.S. figure, May 2025. Local pay can be higher or lower.
These pay and employment figures are for the broader BLS group “Computer Occupations, All Other”, not this job alone.
- 10th percentile
- $55,940
- $26.89/hr
- 25th percentile
- $79,370
- $38.16/hr
- Median percentile
- $116,580
- $56.05/hr
- 75th percentile
- $157,500
- $75.72/hr
- 90th percentile
- $188,470
- $90.61/hr
What does an information security engineer do?
Develop and oversee the implementation of information security procedures and policies. Build, maintain and upgrade security technology, such as firewalls, for the safe use of computer networks and the transmission and retrieval of information. Design and implement appropriate security controls to identify vulnerabilities and protect digital files and electronic infrastructures. Monitor and respond to computer security breaches, viruses, and intrusions, and perform forensic investigation. May oversee the assessment of information security systems.
The tasks that matter most day to day
- Identify security system weaknesses, using penetration tests.
- Coordinate monitoring of networks or systems for security breaches or intrusions.
- Assess the quality of security controls, using performance indicators.
- Train staff on, and oversee the use of, information security standards, policies, and best practices.
- Scan networks, using vulnerability assessment tools to identify vulnerabilities.
- Develop response and recovery strategies for security breaches.
- Conduct investigations of information security breaches to identify vulnerabilities and evaluate the damage.
- Develop or install software, such as firewalls and data encryption programs, to protect sensitive information.
How to become an information security engineer
Most people in this role hold bachelor's degree — 47% of workers surveyed reported it as their level of education.
Preparation level: zone 4 — Considerable preparation needed
- Education
- Most of these occupations require a four-year bachelor's degree, but some do not.
- Experience
- A considerable amount of work-related skill, knowledge, or experience is needed for these occupations. For example, an accountant must complete four years of college and work for several years in accounting to be considered qualified.
- Training
- Employees in these occupations usually need several years of work-related experience, on-the-job training, and/or vocational training.
Education reported by people doing this job
- Bachelor's Degree47%
- Post-Secondary Certificate16%
- Some College Courses11%
- Associate's Degree or other 2-year degree11%
Common questions
How much does an information security engineer earn?
The national median is $116,580 a year. The full range runs from $55,940 at the 10th percentile to $188,470 at the 90th — entry pay sits closer to the lower figure, and experience, licensing and specialisation move you up the range.
Can you become an information security engineer without a degree?
Not usually — this occupation sits in preparation zone 4, where the typical entry route is most of these occupations require a four-year bachelor's degree, but some do not. The education breakdown above shows what people in the role actually reported.
Skills and knowledge you need
Core skills
- Reading Comprehension4.1/5
- Critical Thinking4.0/5
- Active Listening3.9/5
- Writing3.6/5
- Monitoring3.6/5
- Speaking3.5/5
- Active Learning3.3/5
Knowledge areas
- Computers and Electronics4.6/5
- Engineering and Technology4.0/5
- English Language3.5/5
- Telecommunications3.4/5
- Customer and Personal Service3.0/5
- Design2.9/5
- Mathematics2.8/5
- Education and Training2.8/5
Transferable strengths: Quality Control Analysis, Systems Analysis, Systems Evaluation.