Will AI replace cyber defense analysts?

Why AI struggles to replace this job

• AI can be fooled by 'adversarial attacks' specifically designed to bypass machine learning models.
• Responding to an active breach requires high-stakes leadership and rapid, non-routine decision making.
• Understanding the geopolitical context of state-sponsored attacks requires human intelligence and context.
• Determining the appropriate level of response to a threat involves complex legal and ethical trade-offs.

Tasks AI could automate

• Filtering through thousands of low-level network logs to identify known threats.
• Updating firewall rules based on real-time global threat intelligence feeds.
• Performing initial triage on suspected phishing emails reported by employees.
• Generating weekly summary reports of blocked intrusion attempts.

The 10-year outlook

This will be one of the fastest-growing jobs in the US. The role will increasingly involve 'hunting' for sophisticated threats rather than just reacting to alerts, leading to higher wages and greater specialization.

Common questions