AI Is Giving SOC Analysts More Time, But Is It Costing Them Skills?

A new study from security operations specialist Swimlane finds that artificial intelligence is significantly increasing the capacity of security operations centre (SOC) analysts, freeing them up for more complex and strategic work. Polling 500 security professionals in the US and UK, the research found 47% cited greater capacity as one of the biggest benefits, while over a third reported more time to investigate complex threats or focus on cross-functional work.

Encouragingly, 92% of respondents said they were confident they could spot an incorrect or incomplete AI recommendation, and almost half said they would trust their own judgment over AI if it conflicted with the evidence. Swimlane CISO Mike Lyborg said the real question is not whether analysts should trust AI, but whether they have enough visibility into how a recommendation was reached to know when to intervene.

Despite 88% reporting improved job satisfaction, a quarter said AI has limited their ability to build skills, since routine tasks, now increasingly automated, have traditionally been how junior analysts learn the fundamentals. Swimlane CEO Cody Cornell said organisations need to rethink training and career paths so analysts still develop the judgment needed to know when to trust AI and when not to.