What is a security engineer? Security engineer's work

A society in which various things such as smartphones, home appliances and cars are connected to the Internet has increased the chance of hearing news such as leakage of personal information and leakage of customer information. The importance of information asset value and the importance of security awareness has become widely known, and the demand for security engineers is increasing. This time, I will introduce the security engineer's work contents and annual income.

Security engineer

A security engineer is an engineer specializing in information security . We conduct security-friendly system design and construction, system operation, and investigations and improvements to prevent cyber attacks. I tend to have an image of working silently as a technical profession, but in reality there are many situations where I exchange opinions with clients, and communication skills and personality are important.

Security engineer's job

The security engineer's work is diverse. However, no matter what your job is, you must be familiar with the latest information on information security. If you want to be a security engineer, keep in mind that you will always collect security knowledge. Below, we will introduce the specific work contents of security engineers. You may be responsible for all of the following, or you may be responsible for some of them.

1.Planning / Proposal

It is the job of collecting and analyzing client requirements and proposing necessary security systems. Security engineers who plan and make proposals are sometimes called security consultants . With the advent of the Personal Information Protection Law, the number of companies aiming to acquire ISMS and Privacy Mark has increased, so the demand for security engineers to support the acquisition is also increasing. When planning and making proposals, it is necessary to collaborate with on-site staff in order to understand the organizational weaknesses of each department's organizational structure and technical aspects.

2.Design

Security engineers also design security-friendly systems . It is a job that requires a wide range of knowledge because it is necessary to consider the security after considering the network, equipment, and operation mode. To improve secure programming skills, it is important to first fully understand the security-conscious system design.

3.Implementation

The job of implementing a system that takes security into account. A wide range of knowledge is required as well as design, such as network device settings and programming knowledge. In addition, specialized knowledge about security such as secure programming and security architecture is required. There are many types of vulnerabilities in web applications, and there are many ways to deal with them, so the ability to determine an appropriate implementation method is required.

4. Test

The security engineer's job is to conduct tests to detect system vulnerabilities and countermeasures against vulnerabilities. Security engineers are particularly careful with security checks . In security inspection, in order to find potential vulnerabilities, fake attacks and source code checks are performed. Security investigation is also called vulnerability diagnosis and vulnerability inspection.

5.Operation and maintenance

Perform maintenance work after installing the security system. It is a job to protect the system from system failures and cyber attacks and operate it safely . For operation and maintenance operations, it is necessary to constantly collect market information and update security, and to have accident response skills when there is an actual attack from the Internet. The security engineer's job is also to conduct continuous intrusion investigations.