AI to Assist, Not Replace, SOC Analysts at Infosecurity 2026

At Infosecurity Europe 2026, vendors discussed the role of AI in Security Operations Centers (SOCs), asserting that while AI will automate repetitive tasks, it will not replace human analysts. Vendors emphasized the need for transparency in AI operations, labeling AI as a 'glass box' that supports rather than replaces analysts. They propose a shift in analyst roles from data gatherers to 'tier-1.5 analysts,' making them supervisors of AI processes, which enhances job satisfaction and training.

Vendors anticipate the emergence of new roles like 'cyber defense engineers,' focusing on engineering better defenses rather than reactive alert management. This technological evolution aims to improve operational efficiency despite ongoing economic pressures in the sector.