Group Purchasing
Group Purchasing

The SOC Analyst in the Age of AI: What’s Changing, What Still Matters, and How to Keep Up

  • Wed, Nov 11, 2026
  • 11:00AM - 12:00PM EST
  • English
  • John Hubbard
  • Technical Presentation
Login to register
Webcast Hero

AI is changing how security operations centers work, and the role of the SOC analyst is changing with it. Tasks that once required hours of manual investigation can increasingly be assisted by AI, while new tools, workflows, and expectations are reshaping what analysts need to know to be effective. But how much of the analyst's job is actually changing? Which skills will become more important as AI takes on more of the work? And which fundamentals remain essential, regardless of how sophisticated our tools become?

Join SANS instructor and SEC450 course author John Hubbard for a practical discussion of what the modern SOC analyst needs to succeed. We'll explore how AI is changing everyday SOC workflows, where it can help and where it can lead analysts astray, and why understanding the fundamentals of security analysis remains critical.

We'll also introduce the latest updates to SEC450, including new coverage of AI concepts and workflows, and explain how the course is evolving to prepare analysts for today's security operations environment.

Who should attend?

  • SOC Analysts
  • Intrusion Detection Analysts
  • Cyber Defense Analysts
  • Incident Handlers
  • Detection Engineers
  • Security Engineers
  • Threat Intelligence Analysts
  • SOC Leads/Managers

Learning objectives:

  • Preview the course's major update and what the course now covers under its new title "AI-Enabled Security Operations: Hands-on Investigation, Detection, and Automation
  • Explain how the course's move from 6 days to 5 tightens the curriculum around automation, without losing core SOC analyst skills
  • Walk through the shift from SEC450's old CTF capstone to the new optional case study, where students apply course concepts to a real, measurable improvement at their own org
  • Show how AI-assisted workflows cut manual effort in detection, triage, and investigation 

This session supports concepts from the SANS SEC450: AI-Enabled Security Operations: Hands-on Investigation, Detection, and Automation. To learn more about this courses, browse upcoming course runs, and access a wide range of free Cyber Defense tools and resources, Click Here!

Meet Your Speaker

John Hubbard
John Hubbard

John Hubbard

Consultant at Security Operations Center (SOC)

John is a Senior SANS Instructor and SOC consultant, author of SEC450 and LDR551. With deep SOC leadership experience, GIAC certifications, and hands-on labs, he equips cyber defenders with the skills to hunt, detect, and lead resilient operations.

Read more about John Hubbard