Also called Security Technical Specialist, Information Security Engineer, Security Consultant.

In summary

Security analysts plan, co-ordinate and implement security measures to protect computer systems from unauthorised access. This is a critical role, which is responsible for protecting an organisation’s information.

A security analyst may

• perform day-to-day security management activities, including responding to user problems and rectifying faults
• detect and respond to intrusion or security breaches
• perform security audits and maintain a systems disaster recovery manual
• co-ordinate contingency planning and testing
• perform maintenance operations such as signature updates and software upgrades
• execute, monitor, investigate, summaries and report on information received from security devices
• ensure all security documentation and procedures meet compliance requirements
• assess the impact of new technologies on existing or planned systems

What learning areas and study is needed?

• Degree in Computer Science, Computer Engineering or Information Systems-related field
• Security certification such as Certified Information System Security Professional (CISSP)
• Understanding of TCP/IP, ability to read code and ideally undertake basic programming, and familiarisation with penetration testing (otherwise known as ethical hacking)
• A good understanding of networking, hardware and operating systems and the web is critical

This career would appeal to people who

• can write professional reports and communicate technical issues in non-technical terms, both orally and written
• have the ability to understand and assess business requirements in relation to security
• can remain calm under high pressure and stressful situations
• are willing to continuously update IT skills and knowledge

Remuneration and job prospects?

According to the 2007/08 Michael Page Technology Salary Survey, security analysts earn between $80,000 and $140,000 per annum.

The responsibilities of security analysts has increased in recent years as there has been a large increase in the number of cyber attacks on data and networks. These roles will continue to be in demand for the highly trained and experienced.

Starting out

Many security analysts start out as a network engineer, before moving into the more specialised and higher level role of security analyst.

Going towards

Security analysts tend to be at the high end of the pay scale. Many move into senior IT management roles.