Gartner Predicts SOCs Will Have 50% More Engineers Than Analysts by 2028
Summary
Gartner forecasts that by 2028, Security Operations Centers (SOCs) will employ 50% more engineers than analysts. This shift is driven by the increasing automation of routine alert handling by AI agents. Prophet Security is analyzing how AI is transforming SOC roles, including detection engineering, threat hunting, and exposure management.
IFF Assessment
The article discusses how AI is expected to automate routine tasks in SOCs, freeing up analysts for more complex work and indicating a trend towards more specialized roles like detection engineering, which is a positive development for defenders.
Defender Context
This prediction highlights a significant evolution in SOC staffing and responsibilities, emphasizing the growing importance of engineering skills for building and managing AI-driven security systems. Defenders should prepare for a workforce increasingly focused on AI integration, automation, and more sophisticated threat analysis, rather than solely on alert triage.