Gartner®: The Roles Required for the AI-Enabled SOC

The SOC of 2030 needs more engineers than analysts. Here's how to start rebuilding the team now.

This Gartner report maps the role transformation across three time horizons (today, 2028, 2030), and gives cybersecurity leaders concrete actions for each one.

"By 2028 there will be 50% more engineers in security operations teams than analysts."¹

Access the full Gartner report to learn:

• Why the "L1 triage analyst" role is being absorbed into AI-supervised case validation functions
• How detection engineering is becoming SecOps workflow engineering, and what that means for hiring
• The three new SOC role archetypes (detection engineer, threat expert, exposure specialist) that will dominate by 2030