Will AI replace Information Security Engineers?

AI can do 98% of the work Information Security Engineers do at least twice as fast. People already use it for 1 of their 20 tasks, while 18 more are ready but barely used so far. 1 still needs a person.

AI is already doing this1 · 4% of time

People already use AI for these tasks in real work, based on Anthropic's analysis of how Claude is used.

  • Oversee performance of risk assessment or execution of system tests to ensure the functioning of data processing activities or security measures.Mostly assisted4% of time

AI could do this next18 · 94% of time

AI can speed these up by at least half, but real use has not caught up yet. These are next in line.

  • Identify or implement solutions to information security problems.10% of time
  • Coordinate monitoring of networks or systems for security breaches or intrusions.8% of time
  • Conduct investigations of information security breaches to identify vulnerabilities and evaluate the damage.7% of time
  • Develop or install software, such as firewalls and data encryption programs, to protect sensitive information.7% of time
  • Troubleshoot security and network problems.7% of time
  • Develop or implement software tools to assist in the detection, prevention, and analysis of security threats.6% of time
  • Review security assessments for computing environments or check for compliance with cybersecurity standards and regulations.6% of time
  • Coordinate documentation of computer security or emergency measure policies, procedures, or tests.5% of time
  • Coordinate vulnerability assessments or analysis of information security systems.5% of time
  • Develop information security standards and best practices.5% of time
  • Provide technical support to computer users for installation and use of security products.5% of time
  • Write reports regarding investigations of information security breaches or network evaluations.5% of time
  • Assess the quality of security controls, using performance indicators.4% of time
  • Develop response and recovery strategies for security breaches.4% of time
  • Recommend information security enhancements to management.4% of time
  • Scan networks, using vulnerability assessment tools to identify vulnerabilities.4% of time
  • Identify security system weaknesses, using penetration tests.2% of time
  • Oversee development of plans to safeguard computer files against accidental or unauthorized modification, destruction, or disclosure or to meet emergency data processing needs.2% of time

Still needs a person1 · 2% of time

No real AI use, no proven AI speedup and no robot that can do it yet. This is the part of the job to build on.

  • Train staff on, and oversee the use of, information security standards, policies, and best practices.2% of time

Your week is not the average

Describe what you actually do and get a personal report: your own tasks, what AI can already do, what stays yours and a 90 day plan.

Get my personal report

What this means

AI can already do almost all of this work at least twice as fast. Real use is still behind at 3 out of 100, so the change here is only getting started. Expect the role to shift toward deciding what to do, checking AI's work and owning the result.

What to do next

  • Do the 1 task AI is already handling with AI yourself. Your peers already are, and it is quickly becoming the baseline.
  • Get ahead on the 18 tasks AI could do next. These move as tools improve, so learning them early pays off.
  • Build on the 1 task that stay human. This is where your judgment, skill and relationships matter most.
Web Administrators93%Geographic Information Systems Technologists and Technicians100%Document Management Specialists100%Penetration Testers82%Digital Forensics Analysts96%Blockchain Engineers86%

Get the weekly brief

One short email a week on how AI is changing work, including jobs like this one.

Check another job