Information Security Engineers — Tasks

Task statements

• Identify security system weaknesses, using penetration tests.
• Coordinate monitoring of networks or systems for security breaches or intrusions.
• Assess the quality of security controls, using performance indicators.
• Train staff on, and oversee the use of, information security standards, policies, and best practices.
• Scan networks, using vulnerability assessment tools to identify vulnerabilities.
• Develop response and recovery strategies for security breaches.
• Conduct investigations of information security breaches to identify vulnerabilities and evaluate the damage.
• Develop or install software, such as firewalls and data encryption programs, to protect sensitive information.
• Oversee development of plans to safeguard computer files against accidental or unauthorized modification, destruction, or disclosure or to meet emergency data processing needs.
• Identify or implement solutions to information security problems.
• Develop information security standards and best practices.
• Recommend information security enhancements to management.
• Oversee performance of risk assessment or execution of system tests to ensure the functioning of data processing activities or security measures.
• Coordinate vulnerability assessments or analysis of information security systems.
• Review security assessments for computing environments or check for compliance with cybersecurity standards and regulations.
• Troubleshoot security and network problems.
• Coordinate documentation of computer security or emergency measure policies, procedures, or tests.
• Develop or implement software tools to assist in the detection, prevention, and analysis of security threats.
• Write reports regarding investigations of information security breaches or network evaluations.
• Provide technical support to computer users for installation and use of security products.