How an AI-Driven SOC Model Reshapes Security Operation

John Morgan of Splunk on How AI-Driven Automation Cuts Noise, Speeds Response Tom Field (SecurityEditor) • March 27, 2026

Artificial intelligence agents now reshape security operations by reducing analyst burden and accelerating threat response, said John Morgan, senior vice president and general manager of security at Splunk, a Cisco copmany.

See Also: AI Impersonation Is the New Arms Race—Is Your Workforce Ready?

Organizations face a surge in AI-driven attacks, which compress dwell time and increase alert volume. Morgan explained that embedding AI agents into security operations centers helps automate triage, streamline workflows and surface real threats faster, stressing that human oversight remains central to operations, while agents handle repetitive tasks and recommend actions. This model allows analysts to focus on high-value investigations instead of sorting through noise.

"It's extremely important that we introduce these agents into the security operation workflow so they can automate the triaging, determine if something ...