Skip to content
STRATUSWORKFORCE SCAN
Menu

Information Security Engineers

Develop and oversee the implementation of information security procedures and policies. Build, maintain and upgrade security technology, such as firewalls, for the safe use of computer networks and the transmission and retrieval of information. Design and implement appropriate security controls to identify vulnerabilities and protect digital files and electronic infrastructures. Monitor and respond to computer security breaches, viruses, and intrusions, and perform forensic investigation. May oversee the assessment of information security systems.

$116,580 a year (for the broader BLS group this job sits in).

now
12%

of the working time. Estimate.

Kinds of work
  • 99%
  • 1%
  • 0%
31%

Measured, from Anthropic's usage data (2025). Counts help on part of a task.

Half the desk work within reach
October 2027

On the chosen pace and reliability. Estimate.

Share of the working time within reach, now to 2030

0%25%50%75%100%2027202820292030NowDesk work: 99% of the time
Chosen to Ceiling: the share
DateNow
NowEnd of 2030

What each choice means: , , , , . Every pace starts from .

At this date and pace, models finish tasks up to 4.4 h long four times in five.

How far this has come

With GPT-4, measured in March 2023, 0% of this job's working time was within reach at . With Claude 3.7 Sonnet, measured in February 2025, 0%. With Claude Mythos Preview (early), measured in April 2026, 7%. Today's estimate: 12%.

0%5%10%15%20%2023202420252026GPT-4, March 2023: 0% within reachGPT-4 Turbo (Nov 2023), November 2023: 0% within reachGPT-4o, May 2024: 0% within reachClaude 3.5 Sonnet (June 2024), June 2024: 0% within reacho1-preview, September 2024: 0% within reachClaude 3.5 Sonnet (Oct 2024), October 2024: 0% within reacho1, December 2024: 0% within reachClaude 3.7 Sonnet, February 2025: 0% within reacho3, April 2025: 0% within reachGPT-5, August 2025: 0% within reachGemini 3 Pro, November 2025: 1% within reachClaude Opus 4.5, November 2025: 1% within reachGPT-5.2, December 2025: 1% within reachClaude Opus 4.6, February 2026: 1% within reachClaude Mythos Preview (early), April 2026: 7% within reachToday (estimate), September 2026: 12% within reach
Each step is a new best model measured by METR, four in five; the dashed end is today's estimate. Point at a dot for the model.

A backcast: today's task data with the best model METR had measured by each date. It shows how fast the models have moved, not what anyone forecast at the time.

The tasks

Sorted by . 20 tasks from .

TaskKind
Identify security system weaknesses, using penetration tests.Done more than weekly by most who do it. 11%1.7 work days6.7 h to 2.5 work days0%Half by Sep 2027
Oversee development of plans to safeguard computer files against accidental or unauthorized modification, destruction, or disclosure or to meet emergency data processing needs.Done more than weekly by most who do it. 11%1.7 work days3.3 h to 4.2 work days2%Half by Feb 2028
Develop or implement software tools to assist in the detection, prevention, and analysis of security threats.Done more than yearly by most who do it. 11%2.1 work days3.3 h to 1.7 work weeks1%Half by Sep 2028
Conduct investigations of information security breaches to identify vulnerabilities and evaluate the damage.Done more than yearly by most who do it. 9%1.7 work days3.3 h to 1.7 work weeks2%Half by Jul 2028
Assess the quality of security controls, using performance indicators.Done several times a day by most who do it. 7%5 h1.7 h to 1.7 work days17%Half by Apr 2027
Coordinate vulnerability assessments or analysis of information security systems.Done more than monthly by most who do it. 6%6.7 h1.7 h to 2.1 work days9%Half by Aug 2027
Review security assessments for computing environments or check for compliance with cybersecurity standards and regulations.Done daily by most who do it. 6%6.7 h1.7 h to 2.1 work days9%Half by Aug 2027
Coordinate documentation of computer security or emergency measure policies, procedures, or tests.Done daily by most who do it. 5%5 h1.7 h to 2.1 work days15%Half by Jun 2027
Develop response and recovery strategies for security breaches.Done more than monthly by most who do it. 5%1.7 work days3.3 h to 4.2 work days2%Half by Feb 2028
Oversee performance of risk assessment or execution of system tests to ensure the functioning of data processing activities or security measures.Done more than weekly by most who do it. AI observed on this task.4%6.7 h1.7 h to 2.1 work days9%Half by Aug 2027
Identify or implement solutions to information security problems.Done daily by most who do it. 4%3.3 h1.3 h to 2.1 work days23%Half by Apr 2027
Coordinate monitoring of networks or systems for security breaches or intrusions.Done daily by most who do it. 4%1.7 h25 min to 5 h51%Half by now

Within reach, per task: the share of the task's time whose instances are short enough for a model to finish at the chosen date, pace and reliability. Half by: the date half of that time comes within reach.

Jobs that share skills with this one

From O*NET's related occupations. Within reach now and by the end of 2028, long-run pace, four in five.

Where this job works

The industry groups that employ the most of it (BLS, May 2025). Counts are for the broader BLS group this job sits in.

Where the most of these jobs are

The metro areas with the most people in it (BLS, May 2025). Counts are for the broader BLS group this job sits in.