www.infosecurity-magazine.com 30 Sept 2026, 12:00 UTC

AI Boosts SOC Capacity but Risks Creating a Steeper Entry Path

CyberSIXT Evidence Panel Source marked as original reporting

A new Swimlane study surveying 500 security professionals and leaders in US and UK organisations using AI in security operations finds that AI is expanding SOC analysts’ capacity for higher‑value work, while also raising concerns about skill development.

The report, The New SOC Career Ladder, indicates that nearly half of respondents (47%) view “greater capacity” as a major impact of AI, with about a third noting more time to investigate complex threats (35%) and a shift towards strategic or cross‑functional work (35%). More than two‑fifths also said they spend less time on repetitive tasks and have more time for broader responsibilities.

Confidence in spotting incorrect or incomplete AI recommendations is high (92%), and about half (48%) would rely on their own judgement if an AI suggestion conflicts with evidence or could disrupt business operations. Swimlane’s Mike Lyborg emphasises that accountability remains with people even as AI takes on more SOC workload, and that decision‑making should remain auditable and contingent on what actions follow from AI outputs.

The study also flags concerns about skills development. Although 88% of respondents say AI has improved job satisfaction, 24% report that AI limits their ability to build skills. Training and career pathways may need redesigns as routine work—often foundational for learning investigative judgement—become automated. About 47% anticipate AI will create a steeper entry path into the profession, with 37% expecting higher requirements for at‑entry roles and 10% foreseeing fewer opportunities for junior analysts.

Around 41% expect new roles centred on AI oversight, validation and orchestration, while only 1% expect the traditional SOC path to stay largely unchanged. The report urges security leaders to formalise AI oversight, separately measure skill growth from satisfaction, and provide structured opportunities for junior analysts to develop judgement.

View full article

Article by CyberSIXT