Careers in Information Technology Security

Your data is valuable to you. Is your secure information at risk? Consider these recent findings of a survey by the Computer Security Institute (CSI), with participation from the Federal Bureau of Investigation’s (FBI) Computer Intrusion Squad:

• 85% of respondents (large corporations and government agencies) detected security breeches within a 12-month time period.
• 35% of respondents (186 companies or agencies) quantified their financial losses at $377,828,700, compared to 249 respondents the previous year that reported losses of $265,589,940.
• 91% of respondents detected employee abuse of Internet privileges.
• 94% detected computer viruses within their network.
• 78% of respondents said they had detected Denial of Service attacks.
• 58% reported their network had been attacked 10 or more times.

Information Security Professionals can be found in almost every industry, but the organizations that typically hire security professionals include telecommunications, healthcare, engineering firms, government, banking, and other financial-related industries.

Information Technology Security students with one or more of these certifications can qualify for industry positions such as:

• Systems Administrator
• Systems Security Professional
• Information Technology Security Analyst
• Information Security Specialist
• Information Technology Security Architect
• Information Technology Security Manager
• Information Technology Security Risk Manager
• Information Technology Security Consultant

To succeed in a career in Information Technology Security, you should have the following:

• Knowledge of network systems and security protocols
• Knowledge of security software programs, tools, and their implementation
• Knowledge of best practices in developing security procedures and infrastructure
• How to develop and write information security policies
• Strong conceptual and analytical skills
• Strong critical thinking ability
• Ability to operate as an effective member of a team
• Ability to manage multiple diverse tasks simultaneously
• Ability to implement and monitor security policy
• Strong project management skills
• Demonstrate interpersonal and conflict management skills
• Ability to effectively communicate security-related concepts to many types of people

• Excellent oral, written and presentation skills

The U.S. Department of Labor's Occupational Outlook Handbook states that the widespread use of the Internet has resulted in an increased focus on security. Information technology (IT) security involves computer security, making software and networks safe, homeland security, analyzing vulnerabilities, managing firewalls, and providing protection against intrusion and viruses. The need for more secure Internet and intranet sites to ensure protection for individuals’ personal information and to allow companies and banks to protect their funds and infrastructure has created a new demand for cyberspace security professionals.

This increased need for security will help to create more jobs for security specialists, who will be employed more often to make judgments on a system’s vulnerability. Therefore, employment of security analysts and of consultants with security experience and expertise should rise rapidly.

Employment of computer security specialists is expected to increase much faster than the average for (that means that employment is projected to increase 27% or more) all occupations as firms continue to invest heavily in securing computer networks. Companies are looking for workers who are knowledgeable about the function and administration of networks. Such employees have become increasingly hard to find as systems administration has moved from being a separate function within corporations to one that forms a crucial element of business in an increasingly high-technology economy. Also, demand for computer security specialists will grow as businesses and government continue to invest heavily in "cyber security," protecting vital computer networks and electronic infrastructures from attack. The information security field is expected to generate many opportunities over the next decade as firms across all industries place a high priority on safeguarding their data and systems.

Nationally, median annual earnings of wage-and-salary computer support specialists were $41,470 in May 2006. The middle 50 percent earned between $32,110 and $53,640. The lowest 10 percent earned less than $25,290, and the highest 10 percent earned more than $68,540.

Median annual earnings of wage-and-salary network and computer systems administrators were $62,130 in May 2006. The middle 50 percent earned between $48,520 and $79,160. The lowest 10 percent earned less than $38,610, and the highest 10 percent earned more than $97,080.

According to Robert Half Technology, starting salaries in 2007 ranged from $27,500 to $37,000 for help-desk workers. Starting salaries for desktop support analysts ranged from $46,500 to $65,250. For systems administrators, starting salaries ranged from $50,000 to $75,750.

Source: Bureau of Labor Statistics, U.S. Department of Labor, Occupational Outlook Handbook

The growth of electronic commerce means that more establishments use the Internet to conduct their business online. This growth translates into a need for information technology specialists who can help organizations use technology to communicate with employees, clients, and consumers. Growth in these areas also is expected to fuel demand for specialists who are knowledgeable about network, data, and communications security.