Activity
Mon
Wed
Fri
Sun
Dec
Jan
Feb
Mar
Apr
May
Jun
Jul
Aug
Sep
Oct
Nov
What is this?
Less
More
2 contributions to AI Cybersecurity Academy
𝐓𝐡𝐞 𝐟𝐮𝐭𝐮𝐫𝐞 𝐨𝐟 𝐭𝐡𝐞 𝐒𝐎𝐂 𝐰𝐢𝐥𝐥 𝐧𝐨𝐭 𝐥𝐨𝐨𝐤 𝐥𝐢𝐤𝐞 𝐭𝐨𝐝𝐚𝐲.
My view: a lot of first-line triage and routine investigation work will be automated 🤖 That does not mean all analyst jobs disappear. But it does mean more people in security will need to work with AI agents and build SOC engineering skills to test, monitor and improve them. I shared my thoughts in my recent youtube video here: https://youtu.be/XpqR4GG0ODU
1 like • 1d
Agree 💯 And from the GRC side, I think this creates a whole new layer of work too. If AI agents are handling triage, someone has to govern them: defining what they're allowed to do, testing their decisions, keeping audit trails, and proving to auditors that the controls around them actually work. Frameworks like the NIST AI RMF are going to matter a lot more. Curious what you think: will SOC teams own that oversight, or will it shift toward GRC and risk teams?
0 likes • 10h
@Pavel Hrabec Thank you for such a detailed answer, Pavel, this is really valuable to hear from the inside! 🙏🏾 That split makes a lot of sense: GRC sets the rules for what data agents can touch, and the SOC enforces them and gets alerted when someone breaks them. It reminds me of my asset work. You can't govern what you can't inventory, and it sounds like AI usage is hitting that same wall right now. Companies first have to find out which AI tools people are actually using, and with what data, before they can control any of it. Curious: for the visibility piece, are you relying mostly on licensed tools (DLP, browser or endpoint monitoring), or does a lot of it still start with policy and user attestation?
Hey everyone! 👋🏾 I'm Travail from the San Francisco Bay Area in California.
I've spent 9 years in California public service working in compliance and IT asset governance: managing accountability for 1,177 IT assets, handling lost and stolen device incidents, and running compliance reviews and corrective-action plans. Turns out I've been doing GRC-style work for years without knowing that's what it was called. 😄 Now I'm making the move into tech: ☁️ AWS Certified Cloud Practitioner, taking the Solutions Architect – Associate this month 🛡️ Building hands-on skills through cyber range labs 🤝 Member of ISC2 East Bay and Cyversity I joined to learn how AI is changing security, especially the governance side: how organizations test, monitor, and control AI tools responsibly. Looking forward to learning from you all. Feel free to connect! 🙌🏾
0 likes • 10h
@Pavel Hrabec Haha, thank you Pavel! 😄 Glad it made you chuckle. Most people run from GRC, but I guess it found me first! Yes, I'd love to connect: linkedin.com/in/travail-robertson Thanks for the warm welcome. Excited to learn here! 🙌🏾
1-2 of 2
Travail Robertson
1
4 points to level up
@travail-robertson
Caltrans analyst with 9 yrs state service transitioning to GRC. AWS certified, NIST CSF capstone, handles IT asset governance & security.

Active 13m ago
Joined Nov 11, 2026
Bay area, California
Powered by