Podcasts
AI Security Brief
Ep 15
AI Security Brief 11.5.26
Ep 15 | 11.5.26

How close are we to an autonomous SOC?

Show Notes
Transcript

AI-enabled attacks are on the rise, your analysts are drowning in alerts, and vendors are positioning an autonomous SOC as the solution. But what can AI agents actually do today? How will analyst roles evolve? And how much autonomy can you safely give?

Cybersecurity researcher Jon Oltsik joins Johnny and Dustin to separate AI automation from AI autonomy. They explore what it takes to bring AI agents into the SOC safely, from testing agents in shadow mode to establishing clear guardrails and human oversight, and why trust in an agent has to be earned through proven performance.

You’ll learn:

  • How process automation differs from full autonomy, and where human judgment stays essential
  • How SIEM, SOAR, and analyst roles could evolve, and the new career opportunities emerging
  • How to defend the agentic SOC itself: agent identities, access boundaries, audit trails, and a kill switch
  • Where to start in your organization’s move to an agent-enabled SOC 

Why stick around: 

Jon shares practical steps for introducing AI agents into your SOC without overestimating their capabilities or overlooking the risks.

Episode resources:

About AI Security Brief

AI Security Brief is where security and technology leaders come to get ahead. Join us for real conversations on the AI trends, threats, and decisions that can't wait.

About TrendAI™

TrendAI™ empowers organizations to lead the future of AI with proactive security designed to inspire innovation and eliminate risk. TrendAI™. AI Fearlessly.

AI Security Brief
Podcast Info
HOST(S):
Dustin Childs
Johnny Hand
Dustin C. Childs is a part of TrendAI™ Zero Day Initiative™ (ZDI), which is the world's largest vendor-agnostic bug bounty program. Dustin began his infosec journey in the late 1990s at the Air Force Information Warfare Center. Following his time working for the government, Mr. Childs worked in the Microsoft Trustworthy Computing group, where he served as a case manager in the Microsoft Security Response Center (MSRC) with a focus on addressing vulnerabilities in the Windows operating system and in Microsoft's developer tools. In his current role, Mr. Childs gathers and analyzes threat intelligence from various TrendAI and open-source resources to understand and communicate risk to enterprises. He also creates, implements, and oversees internal and external communications programs that promote the work of the TrendAI™ ZDI and its researchers. He has spoken at multiple conferences including Black Hat USA, ThotCon, BlueHat, B-Sides, and multiple ISSA events.
Johnny Hand is a seasoned cybersecurity leader with over 20 years of experience translating intricate technical concepts into business-critical operations. He is the global CISO at TrendAI™, where he spearheads the integration of artificial intelligence for enhanced security and operational efficiency. His background in securing critical infrastructure includes leading information security and technology operations for an international academic institution and overseeing communication and defensive cyber operations for specialized units within the U.S. Navy. His focus remains on building resilient security strategies that adapt to the evolving technology landscape.
Schedule: Biweekly
Creator: TrendAI
AI Security Brief