IT security consultants assess software, computer systems, and networks for vulnerabilities, then design and implement the best security solutions for an organization's needs. They play the role of both the attacker and the victim and are asked to locate and potentially exploit vulnerabilities.