ict-security-technician/references/tasks.md

Tasks & work activities — ICT security technician

Source: O*NET 30.3, occupation 15-1299.05 (Information Security Engineers).

Task statements

• [Core] Assess the quality of security controls, using performance indicators.
• [Core] Conduct investigations of information security breaches to identify vulnerabilities and evaluate the damage.
• [Core] Coordinate documentation of computer security or emergency measure policies, procedures, or tests.
• [Core] Coordinate monitoring of networks or systems for security breaches or intrusions.
• [Core] Coordinate vulnerability assessments or analysis of information security systems.
• [Core] Develop information security standards and best practices.
• [Core] Develop or implement software tools to assist in the detection, prevention, and analysis of security threats.
• [Core] Develop or install software, such as firewalls and data encryption programs, to protect sensitive information.
• [Core] Develop response and recovery strategies for security breaches.
• [Core] Identify or implement solutions to information security problems.
• [Core] Identify security system weaknesses, using penetration tests.
• [Core] Oversee development of plans to safeguard computer files against accidental or unauthorized modification, destruction, or disclosure or to meet emergency data processing needs.
• [Core] Oversee performance of risk assessment or execution of system tests to ensure the functioning of data processing activities or security measures.
• [Core] Provide technical support to computer users for installation and use of security products.
• [Core] Recommend information security enhancements to management.
• [Core] Review security assessments for computing environments or check for compliance with cybersecurity standards and regulations.
• [Core] Scan networks, using vulnerability assessment tools to identify vulnerabilities.
• [Core] Train staff on, and oversee the use of, information security standards, policies, and best practices.
• [Core] Troubleshoot security and network problems.
• [Core] Write reports regarding investigations of information security breaches or network evaluations.

Detailed work activities

• Analyze security of systems, network, or data.
• Coordinate reporting or editing activities.
• Develop operating strategies, plans, or procedures.
• Develop performance metrics or standards related to information technology.
• Develop software or computer applications.
• Establish work standards.
• Evaluate potential of products, technologies, or resources.
• Evaluate utility of software or hardware technologies.
• Implement security measures for computer or information systems.
• Install computer software.
• Investigate illegal or suspicious activities.
• Manage information technology projects or system activities.
• Monitor processes for compliance with standards.
• Provide technical guidance to other personnel.
• Read documents to gather technical information.
• Recommend changes to improve computer or information systems.
• Supervise information technology personnel.
• Test computer system operations to ensure proper functioning.
• Train personnel in technical or scientific procedures.
• Troubleshoot issues with computer applications or systems.
• Write reports or evaluations.