Computers and math
Penetration Testers
- Median pay
- $116,580
- Outlook
- Faster than average
Bachelor's degree
- Critical Thinking
- Reading Comprehension
- Writing
SOC 15-1299.05Bright outlook
Develop and oversee the implementation of information security procedures and policies.
Data verified Nov 2026 · CollegesRef 2026–27 edition
Source: BLS 2025 wages · 2025–35 projections · figures for the broader BLS group "Computer occupations, all other"
Annual pay range
435,370 people work in this occupation.
In short
Information security engineers design and manage security measures to protect computer networks and digital data. Belonging to a broad computer occupational group with a median annual pay of $116,580, these professionals ensure systems remain safe from cyber threats.
Written with AI from the BLS, O*NET and CareerOneStop data on this page. Every figure is checked against that data before it is published.
Develop and oversee the implementation of information security procedures and policies. Build, maintain and upgrade security technology, such as firewalls, for the safe use of computer networks and the transmission and retrieval of information. Design and implement appropriate security controls to identify vulnerabilities and protect digital files and electronic infrastructures. Monitor and respond to computer security breaches, viruses, and intrusions, and perform forensic investigation. May oversee the assessment of information security systems.
Most need a bachelor's degree and several years of related experience.
Information security engineers focus on safeguarding digital files, electronic infrastructures, and networks. On a daily basis, these professionals build, maintain, and upgrade security technologies like firewalls. They monitor networks for security breaches, respond to viruses or intrusions, and conduct forensic investigations. The job requires identifying vulnerabilities and implementing appropriate security controls to protect information.
To succeed in this role, individuals must be skilled in critical thinking, reading comprehension, active listening, and systems analysis. They spend much of their time working with computers, analyzing data, getting information, and updating their technical knowledge. The work demands a strong understanding of computers, electronics, engineering, technology, and telecommunications.
Because this career aligns with the conventional interest area, it suits people who enjoy structured, detail-oriented tasks. Important work styles for these engineers include attention to detail, integrity, cautiousness, dependability, and stress tolerance. They must also show intellectual curiosity and innovation when solving complex digital problems and evaluating compliance with safety standards.
Entering this career typically requires a bachelor's degree. Because the role demands considerable preparation, most professionals also need several years of experience in a related computer or technology field before securing a position.
Students preparing for this career can choose from several relevant college majors. Helpful programs of study include general computer and information sciences, computer science, computer and information technology administration and management, and information science or studies. Other related majors include security science and technology, medical illustration and informatics, biomathematics, bioinformatics, and computational biology. Even chemistry can serve as a pathway.
While not always mandatory, obtaining professional credentials can help demonstrate expertise to employers. Relevant certifications available for this field include the Certified Incident Handling Engineer credential and the Certified Information Systems Risk Manager credential, both offered by Mile2.
In 2025, the median annual pay for the broader group of all other computer occupations was $116,580. Within this group, the lowest 10% earned less than $55,940, while the highest 10% earned more than $188,470.
There are 435,370 people employed in this field. Between 2025 and 2035, employment is projected to grow by 5.1%, which is faster than the average for all occupations. This growth and normal staff turnover are expected to result in approximately 27,000 job openings each year.
Interest code CIR. Compare it with yours
AI Security Specialist (Artificial Intelligence Security Specialist) · Application Security Administrator (Application Security Admin) · Application Security Engineer · Automotive Security Engineer · BISO (Business Information Security Officer) · Cloud Engineer · Cloud Security Architect · Cloud Security Engineer · Communications Security Manager (COMSEC Manager) · Cyber Defense Incident Responder
Career pathway
Interests that fit the work, the career, majors that lead there and colleges whose graduates in those majors earn the most. Hover or focus a step to follow one path.
1Interests
2This career
3Majors
4Colleges
Interests
This career
Majors
Colleges
College Scorecard program outcomes
Programs that lead to this career, ranked by what their graduates earn four years after finishing. Earnings are for graduates who received federal aid.
Philadelphia, PA · Computer and Information Sciences, General · Bachelor's
Source: U.S. Department of Education College Scorecard field-of-study data, 2025. Programs with few graduates are not listed.
NCES CIP–SOC crosswalk
Related programs by four-digit CIP code. They are common routes in, not the only ones.
1,547 colleges offer it
1,371 colleges offer it
1,184 colleges offer it
1,070 colleges offer it
513 colleges offer it
446 colleges offer it
200 colleges offer it
178 colleges offer it
149 colleges offer it
113 colleges offer it
109 colleges offer it
60 colleges offer it
17 colleges offer it
CareerOneStop
What information security engineers may need beyond a degree, where a license is required, and what the work pays in each state.
Core certifications employers recognise for this work.
Programs of study that prepare people for this work. Showing 12 of 14.
Data from CareerOneStop, sponsored by the U.S. Department of Labor (Employment and Training Administration, with the Minnesota Department of Employment and Economic Development). Retrieved November 9, 2026.
Your plan
Courses, majors, colleges, scholarships and a timeline for this career, built from your profile.
Written with AI from the BLS, O*NET and CareerOneStop data on this page. Every figure is checked against that data before it is published.
These professionals are known by many names, including application security engineers, cloud security engineers, and cyber defense incident responders. Other titles include automotive security engineers, business information security officers, and communications security managers.
Daily activities revolve around working with computers, analyzing data, and solving technical problems. Engineers spend their time documenting information, evaluating system compliance with safety standards, and communicating with their supervisors and peers.
Related career paths include penetration testers, information security analysts, and security management specialists. Other similar roles are network and computer systems administrators, computer systems engineers or architects, and security managers.
Every figure on this page comes from these public datasets. Missing values are shown as not reported, never estimated.
Version 31.0
Version 2025-35 · Data year 2025
Version 2025 · Data year 2025
Version 2020 · Data year 2020
O*NET 31.0 Database by the U.S. Department of Labor, Employment and Training Administration (USDOL/ETA). Used under the CC BY 4.0 license. CollegesRef has modified all or some of this information.
Data from CareerOneStop, sponsored by the U.S. Department of Labor (Employment and Training Administration, with the Minnesota Department of Employment and Economic Development). Retrieved November 9, 2026.
Page data updated November 5, 2026.