AI Delegation Index

What work could you hand off to an AI agent?

Information Security Analysts

Moderate

AI agents could support several recurring tasks in this job, while people continue to lead decisions and handle exceptions.

Where agents can help most

  1. 1

    Scan vulnerabilities and assign fixes

    Use an agent to pull scanner results, asset lists, and basic system notes into one review packet, then sort findings by exposure and likely impact.

  2. 2

    Update malware defenses and alerts

    Use an agent to read vendor advisories, threat notes, and your current protection version lists, then draft an update plan for affected devices.

  3. 3

    Draft guidance for users on secure behavior

    Use an agent to turn a repeated security mistake or incident note into a short coaching message, a refresher handout, or a follow-up checklist for the people involved.

Search another job

O*NET-SOC 15-1212.00 · #193 of 923

Result context

How to read this result

Plan, implement, upgrade, or monitor security measures for the protection of computer networks and information. Assess system vulnerabilities for security risks and propose and implement risk mitigation strategies. May ensure appropriate security controls are in place that will safeguard digital files and vital electronic infrastructure. May respond to computer security breaches and viruses.

National position
#193 of 923 occupations
Top 21% of occupations
Overall AI delegation potential
Moderate
Potential of score-contributing workflows
Strong · 77/100
Meaningful work covered
72%

The overall rating combines how useful the best agent workflows are with how much of the occupation they address. It is not an estimate of job automation or replacement.

Recommended agent uses

3 workflows you could delegate to AI

1

Scan vulnerabilities and assign fixes

How you could use an agent

Use an agent to pull scanner results, asset lists, and basic system notes into one review packet, then sort findings by exposure and likely impact. It can draft patch, configuration, or compensating-control suggestions so you can send a clean mitigation list to the right system owners.

Where you stay involved

You check whether the findings make sense in your environment, decide what can be fixed now, and approve anything risky or business-critical before it goes out.

Review level: High

2

Update malware defenses and alerts

How you could use an agent

Use an agent to read vendor advisories, threat notes, and your current protection version lists, then draft an update plan for affected devices. It can prepare rollout notes, highlight gaps in coverage, and summarize whether the latest protections appear in place after updates.

Where you stay involved

You decide which updates are safe to deploy, review any disruption risk, and confirm the final status after changes are made.

Review level: Medium

3

Draft guidance for users on secure behavior

How you could use an agent

Use an agent to turn a repeated security mistake or incident note into a short coaching message, a refresher handout, or a follow-up checklist for the people involved. It can keep track of who has been reminded, what needs to change, and whether the same issue shows up again.

Where you stay involved

You decide how direct the message should be, speak with the users when needed, and handle repeat or sensitive cases yourself.

Review level: Medium

Supporting analysis

Why this occupation's AI delegation potential is Moderate

Underlying methodology score

72 / 100

This technical score determines the qualitative rating; it is not an estimate of the share of the occupation that can be automated.

Importance & frequency72
AI capability80
Digital actionability87
End-to-end leverage78
Safety & reversibility66
Meaningful-work coverage
72%
Physical-work modifier
Limited
Safety modifier
Limited
Qualitative judgment
No material constraint
O*NET task evidence
11 tasks

O*NET 31.0 · methodology 3.3.0. Every workflow passes an action-level physical-execution and protected human-and-veterinary clinical-action gate. Documentation workflows must own a complete digital loop and use digital task evidence only; support-only workflows are disclosed separately and excluded from scoring. Artistic, editorial, normative, and policy-dependent work receives a transparent human-judgment constraint. National ranking within 923 scored O*NET occupations under methodology 3.3.0.

Useful comparisons

Similar occupations

Compare side by side