The Top 10 Information Security Jobs

Cover: Cybersecurity Jobs, 2015

It is no surprise that the field of information security is booming. According to a  report issued by Burning Glass Technologiessuggests that job postings across the IT industry growing 73 percent between 2012-2022, twice the rate of all other IT jobs.

This field is expected to continue to grow over the next few years. There will be 37 percent increase in Information Security Analyst positions between 2012 and 2022.

1. CHIEF INFORMATION SECURITY OFFICER (CISO): To oversee the general operations of an organization’s IT security department and other related staff, is the task of a CISO. A CISO is a C-level management executive. CISO concerns with the organization’s overall security. If anyone is aspire to become a CISO, then he or she must demonstrate a strong background in IT strategy and security architecture.
According to 2015 PayScale Estimates the salary of CISOs is $131,322. The minimum salary of CISOs should be $81,000, but in some of the larger organizations CISOs can earn as much as $240,000 a year.
2. SECURITY ARCHITECT: A Security Architect  is responsible for building and maintaining the computer and network security infrastructure for an organization. A Security Architect is a senior-level employee. Under this position all the individuals develop a comprehensive picture of an organization’s technology and information needs, which they can then use to develop and test security structures designed to protect those systems. Qualification of a Security Architects should be worth in a diverse set of technical skills, including ISO 27001/27002, ITIL and COBIT frameworks, risk assessment procedures, operating systems, and perimeter security controls.
According to 2015 PayScale estimates, the Salary of Security Architects is around $109,794. Minimum salary for a Security Architect should be $84,000 and maximum pay is   approximately $160,000.
3. SECURITY DIRECTOR: Task of a Security Director is to oversee the implementation of all IT security measures throughout an organization. A Security Director is a senior-level employee. Security Directors are expected to possess backgrounds similar to those of CISOs with respect to their knowledge of IT strategy, enterprise architecture, and other security-related concepts. In fact, Security Directors report directly to a CISO and generally assume the position of this executive role in smaller organizations.
According to 2015 PayScale estimates, salary of Security Directors is $104,775 to $116,245. 
4. SECURITY MANAGER: A Security Manager is a mid-level employee. The task of a Security Manager is managing an organization’s IT security policy. Individuals who are interested in becoming a Security Manager must be prepared to create and execute security strategies based on the input from the Security Director and/or the CISO.
According to 2015 PayScale estimates, they can expect to earn at least $71,433, in larger organizations they can make as much as $143,374.
5. SECURITY ENGINEER: A Security Engineer is a mid-level employee. A Security Engineer is responsible for building and maintaining the IT security solutions of an organization. In this capacity, Security Engineers configure firewalls, test new security solutions, and investigate intrusion incidents, among other duties, all while reporting to the Security Manager.
According to 2015 PayScales Estimates the salary of Security Engineer is $86,996.The minimum salary of a Security Engineer is $57,000.
6. INCIDENT RESPONDER: The task of an Incident Responder to address security incidents, threats and vulnerabilities that arise in an organization. As such, individuals who aspire to become Incident Responders must be prepared to actively monitor organization networks for intrusions, perform security audits and penetration testing. They also need skills, including web-based application security, eDiscovery tools and forensic software.
The salary of Incident Responder is between $70,000 and $90,000. Overall, they can expect to earn between $50,000 and $150,000
7. SECURITY CONSULTANT: A Security Consultant is an outside expert who helps an organization implement the best solutions according to their security needs. Those who wish to become Security Consultants must be knowledgeable in a wide range of security standards, security systems and authentication protocols.
According to 2015 PayScale estimates, the salary of Security Consultants is $81,220. Minimum salary of a Security Consultant is $46,000, but in large organizations security consultant can earn as much as $147,000 a year.
8. COMPUTER FORENSICS EXPERT: The task of a Computer Forensics Experts is to analyze evidence gathered from computers, networks and other data storage devices in an effort to investigate incidents of computer crime. The most common employers of Computer Forensics Experts are from variety of organizations, including law enforcement, legal firms and all levels of government. Those who wish to pursue this particular career path must be familiar with several programming languages and operating systems.
The salary of Computer Forensics Experts is $77,270. But in large organizations they can make as much as $119,000.
9. MALWARE ANALYST: The task of a Malware Analyst  in  an organization is to  understand the viruses, worms, bots, Trojans and other malicious software that threaten its network on a daily basis. In this capacity, Malware Analysts commonly work with Computer Forensics Experts and Incident Responders in the event of an intrusion and/or suspicious computer behavior to help identify malicious programs that may have infiltrated an organization’s computer systems.
The salary of a Malware Analysts is $75,000. They can expect to earn at least $48,000, but some can take home as much as $100,000 a year.
10. SECURITY SPECIALIST: A Security Specialist is an entry- to mid-level employee who is responsible for completing a variety of duties designed to strengthen the security of an organization. Oftentimes, Security Specialists are required to analyze the security requirements of an organization’s systems, install and configure security solutions on corporate networks, perform vulnerability testing and help train fellow employees in security awareness.

Cyberintelligence: http://ow.ly/Ut8J6

Burning Glass: http://burning-glass.com/research/cybersecurity/

 

 

« Conditional Clearance For Hackers To Test Automotive & Healthcare Security
What the Next 10 Years of Automation Means for Job Market »

Infosecurity Europe
CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

Syxsense

Syxsense

Syxsense brings together endpoint management and security for greater efficiency and collaboration between IT management and security teams.

Infosecurity Europe, 3-5 June 2025, ExCel London

Infosecurity Europe, 3-5 June 2025, ExCel London

This year, Infosecurity Europe marks 30 years of bringing the global cybersecurity community together to further our joint mission of Building a Safer Cyber World.

IT Governance

IT Governance

IT Governance is a leading global provider of information security solutions. Download our free guide and find out how ISO 27001 can help protect your organisation's information.

Practice Labs

Practice Labs

Practice Labs is an IT competency hub, where live-lab environments give access to real equipment for hands-on practice of essential cybersecurity skills.

LockLizard

LockLizard

Locklizard provides PDF DRM software that protects PDF documents from unauthorized access and misuse. Share and sell documents securely - prevent document leakage, sharing and piracy.

Cyberis

Cyberis

Cyberis are pioneers in customer-focussed information security. Since 2011, we’ve been helping businesses protect their brands, customers and reputation.

Magic Software Enterprises

Magic Software Enterprises

Magic provide Mobile Device Management (MDM) for Secure Enterprise Mobility. Magic MDM overcomes the challenges of mobile device management security by protecting all of your devices, data and content

Critical Infrastructures for Information and Cybersecurity (ICIC)

Critical Infrastructures for Information and Cybersecurity (ICIC)

ICIC addresses the demand for cybersecurity for National Public Sector organizations and civil and private sector organizations in Argentina.

National Cybersecurity Student Association (NCSA) - USA

National Cybersecurity Student Association (NCSA) - USA

The National Cybersecurity Student Association is a one-stop-shop to enhance the educational and professional development of cybersecurity students through activities, networking and collaboration.

IT Governance

IT Governance

IT Governance is a leading global provider of information security solutions. Download our free guide and find out how ISO 27001 can help protect your organisation's information.

BIND 4.0

BIND 4.0

Bind 4.0 is an acceleration program geared toward tech startups with solutions applied to Advanced Manufacturing, Smart Energy, Health Tech or Food Tech fields.

Sevatec

Sevatec

Sevatec’s Active Cyber Defense (ACD) methodology proactively defends against adversarial kills chain, addressing active and emerging threats while reducing program vulnerabilities and risks.

Quantum Security Solutions (QSec)

Quantum Security Solutions (QSec)

QSec is an innovative information security consultancy based in Ghana. We can provide your organisation with information security products and services that assure against information risk.

OSIbeyond

OSIbeyond

OSIbeyond provides comprehensive Managed IT Services to organizations in the Washington D.C., MD, and VA area including IT Help Desk Support, Cloud Solutions, Cybersecurity, and Technology Strategy.

CryptoNext Security

CryptoNext Security

CryptoNext provides optimal end-to-end post-quantum cybersecurity remediation tools and solutions for IT/OT infrastructures & applications.

Covenant Technologies

Covenant Technologies

Make Covenant Technologies the only choice for your IT and cybersecurity recruitment needs. We deliver quality candidates at the forefront of the cybersecurity and IT industry.

ASMGi

ASMGi

ASMGi is a managed services, security and GRC solutions, and software development provider.

ZAG Technical Services

ZAG Technical Services

ZAG Technical Services is an award-winning information technology consulting firm delivering digital transformation solutions, IT assessments, managed services, security, and support.

Resonance Security

Resonance Security

Resonance offers powerful cybersecurity aggregation software that makes protecting against full spectrum cybersecurity threats effortless no matter what your technical level, budget, or scope.

NAM-CSIRT

NAM-CSIRT

NAM-CSIRT is a team established to contribute to the security and stability of critical infrastructure and critical information infrastructure of the Republic of Namibia.

Ridgeline International

Ridgeline International

Ridgeline helps organizations manage digital risk through data privacy and secure infrastructure solutions.