cases, and define a secure target architecture and delivery roadmap. Responsibilities Assess the existing SOC architecture, including SIEM, SOAR, EDR/XDR, threat intelligence, case management, and security data platforms. Evaluate SOC data availability, quality, and suitability for AI-enabled use cases. Identify opportunities for AI augmentation across alert … triage, enrichment, investigation, threat intelligence, incident summarisation, detection engineering, and reporting. Evaluate appropriate AI patterns, including machine learning, retrieval-augmented generation (RAG), generative AI, assistants, and agentic approaches. Determine when conventional automation or process improvement is more appropriate than AI. Define integration patterns between AI services and existing cyber ...
