A firsthand account from a security veteran observing the Cisco Live Americas 2026 SOC, exploring how AI and agentic workflows have fundamentally changed security operations. Key shifts include: AI embedded throughout investigative workflows (incident summaries, automated enrichment, natural language querying), analysts pivoting fluidly across XDR, Splunk, Secure Malware Analytics, Endace, and Wireshark without manual stitching, and security practitioners using AI coding tools like Codex to build their own automations. Two real investigation examples illustrate how workflows that once took hours now complete in minutes. The piece argues that the SOC of the future is not autonomous but human-machine collaborative, with analysts shifting from data gathering to decision making.
