Gartner has forecast that by 2028 security operations centres (SOCs) will employ 50 % more engineers than analysts, a shift driven by the growing use of artificial‑intelligence agents to handle routine alert triage.
The research notes that AI tools are increasingly taking over the repetitive tasks that analysts traditionally perform, freeing them to focus on higher‑level investigations and strategy. As a result, the balance of skill sets in SOC teams is expected to tilt toward engineering roles that build, maintain and optimise these automated systems.
Prophet Security has examined how the rise of AI is reshaping every facet of SOC work. The firm highlights changes in analyst responsibilities, detection‑engineering workflows, threat‑hunting practices and exposure‑management processes.
While the report does not detail specific technologies, it underscores that the expansion of engineering roles will be a direct response to the automation of alert handling and the need for more sophisticated AI‑driven security solutions.
Industry observers say the trend points to a future where SOCs become more technology‑centric, with engineers designing and refining the AI tools that underpin modern cyber‑defence.
<small>Source: Bleeping Computer — read the original story there.</small>
