Information Security Engineer
Technology
Develop and oversee the implementation of information security procedures and policies. Build, maintain and upgrade security technology, such as firewalls, for the safe use of computer networks and the transmission and retrieval of information. Design and implement appropriate security controls to identify vulnerabilities and protect digital files and electronic infrastructures. Monitor and respond to computer security breaches, viruses, and intrusions, and perform forensic investigation. May oversee the assessment of information security systems.
What you'd do all day
The tasks that matter most in this job, most important first.
- 1Identify security system weaknesses, using penetration tests.
- 2Coordinate monitoring of networks or systems for security breaches or intrusions.
- 3Assess the quality of security controls, using performance indicators.
- 4Scan networks, using vulnerability assessment tools to identify vulnerabilities.
- 5Train staff on, and oversee the use of, information security standards, policies, and best practices.
- 6Develop response and recovery strategies for security breaches.
- 7Conduct investigations of information security breaches to identify vulnerabilities and evaluate the damage.
- 8Develop or install software, such as firewalls and data encryption programs, to protect sensitive information.
- 9Oversee development of plans to safeguard computer files against accidental or unauthorized modification, destruction, or disclosure or to meet emergency data processing needs.
- 10Develop information security standards and best practices.
- 11Identify or implement solutions to information security problems.
- 12Recommend information security enhancements to management.
- 13Oversee performance of risk assessment or execution of system tests to ensure the functioning of data processing activities or security measures.
- 14Coordinate vulnerability assessments or analysis of information security systems.
- 15Review security assessments for computing environments or check for compliance with cybersecurity standards and regulations.
- 16Troubleshoot security and network problems.
- 17Coordinate documentation of computer security or emergency measure policies, procedures, or tests.
- 18Develop or implement software tools to assist in the detection, prevention, and analysis of security threats.
- 19Write reports regarding investigations of information security breaches or network evaluations.
- 20Provide technical support to computer users for installation and use of security products.
Also known as
What this job is called on JobStreet, LinkedIn and in job ads. Search these too.
- BISO
- Engineer
- IAM Manager
- IT Architect
- Cloud Engineer
- COMSEC Manager
- Security Admin
- IT Administrator
- Network Engineer
- Security Analyst
How far is this from you?
Roughly how much preparation this job usually takes. In Malaysia your UPU route and the programme's syarat still decide entry, so treat this as a guide, not a gate.
1
Entry straight after SPM
2
SPM + sijil / short TVET course
3
Diploma / TVET (sijil–diploma)
Typical entry
Degree (ijazah sarjana muda)
5
Postgrad (sarjana / PhD) or professional route
Subjects that matter here
The SPM subjects worth your effort for this career, with the reason for each.
What you'd need to know
The subject areas this job leans on most, and the SPM subjects that build them.
- Computers and Electronics93%
Computer Science / ICTElectrical & Electronic Eng. Studies
- Engineering and Technology80%
PhysicsAdditional MathematicsDesign & Technology (RBT)
- English Language71%
English
- Telecommunications67%
Electrical & Electronic Eng. StudiesComputer Science / ICT
- Customer and Personal Service60%
- Design58%
Visual Art (PSV)Technical Comm. GraphicsEngineering Drawing
Tools you'd use
Software and equipment that show up in this job, worth learning early.
What the work feels like
Day-to-day working conditions, so you can tell whether the job suits how you like to work.
- Face-to-face discussionsEvery day
- Contact with other peopleConstant contact
- Dealing with customers or the publicA little
- Leading or coordinating othersHigh
- Handling conflict situationsRarely
- Indoors, air-conditionedEvery day
- Outdoors, in all weatherAlmost never
- Noisy environmentAlmost never
AI and demand for this job
A few real, dated data points — not a single score. AI making some tasks faster usually means a job changes, not that it disappears.
Share of everyday tasks today's AI can already help with (2023)
This estimate is from 2023 — already out of date, since AI moves fast. Treat it as a rough, aging starting point, not the current picture.
Of Malaysian Claude conversations, about this kind of work
Measures how much people use Claude for this work, not how many Malaysians do this job — and more AI use can mean people relying on it, not that it's replacing them.
US Bureau of Labor Statistics data, not Malaysian. Shown because it's the only forward-looking demand estimate we have for this job.
TalentCorp and ILMIA's Critical Occupations List — evidence of a real hiring shortage in Malaysia right now.
Cybersecurity Professionals · Shortage indicators met: INSUFFICIENT DATA
Pay in Malaysia
We don't have a sourced Malaysian salary range for this job yet, and we'd rather show nothing than a number we can't stand behind.
Where to check:
- JobStreet and Hiredly job ads for this title
- DOSM Salaries & Wages Survey
- SSPA scheme tables, if you're aiming for a government post
Check what you may qualify for
Enter your SPM grades and see which routes and programmes you may qualify for. An estimate to plan with, not an offer.
How to get here
Post-SPM pathways with programmes in this career's fields. Tap one to see real programmes and entry requirements.
Related careers
If this interests you, these are worth a look too.
About this information
This describes what the job involves. Pay, demand and entry routes differ in Malaysia, so check the Pathways and Programmes pages for local requirements.
O*NET occupation: Information Security Engineers
Job responsibilities, knowledge areas and work context from O*NET 30.3, US Department of Labor, used under CC BY 4.0. onetcenter.org