When Your SOC Analyst is Also a Bot: AI Agents, MCP, and Many Automation Opportunities in Your Security Operations

Christophe Briguet, Sr. Director of Product Management at Stellar Cyber, argues that AI agents connected through MCP (Model Context Protocol) have transformed security operations from theoretical concepts into practical tools. He outlines six key automation opportunities for SOCs: alert triage, intake automation, detection quality feedback, cross-tool correlation, proactive monitoring, and knowledge capture. He also warns that adversaries possess equivalent AI capabilities, making these improvements urgent.