AI transforms tasks and roles

AI is changing how tasks are performed by formalizing and transferring part of the expertise of human collaborators. This raises questions about the evolving roles of humans in this new landscape, particularly regarding who validates AI's work and who takes responsibility for its outcomes.

Impact on employment and job roles

The most common question about AI is what it will do to jobs. While some predict mass replacement of workers, others see AI as a productivity tool. However, both views are overly simplistic. AI will eliminate certain tasks and jobs but may also create new ones, similar to how the industrial revolution expanded opportunities beyond simple labor.

Cybersecurity and the evolving role of humans

In cybersecurity, AI is often seen as a way to automate tasks and reduce the burden on overworked teams. However, the field involves a continuous battle with adversaries who constantly adapt. As AI introduces new tools, it also creates new risks, decisions, and a stronger need for human expertise and judgment.

Automation and increased workload

Some tasks can be fully automated with AI, reducing or eliminating human involvement, especially in areas like data entry and administrative work. However, other tasks may become more complex or increase in volume. Geoffrey Hinton's concept of AI elasticity highlights how AI can sometimes increase the workload rather than reduce it.

Radiology and the paradox of AI

Radiology provides a clear example of AI's impact on workloads. Initially, it was thought that AI would reduce the number of radiologists needed. Instead, it increased the number of examinations, leading to more data to analyze, more interactions with doctors, and more complex roles for radiologists, even if the nature of their work changed.

Human oversight and professional responsibility

Human supervision, compliance with standards, and professional responsibility remain crucial for safely using AI. This ensures that AI improves efficiency while reinforcing the value of human judgment, especially in fields like medicine, where AI can support but not replace critical decisions.

Cybersecurity's growing demands

The volume of work in cybersecurity is practically limitless. As companies analyze more data, they detect more signals requiring attention. This leads to more investigations, decisions, and coordination, even if AI speeds up individual tasks. The overall workload can increase significantly despite automation.

Adversaries and the arms race in cybersecurity

Unlike diseases that do not adapt to treatments, cybersecurity adversaries use AI to improve their attacks, personalize social engineering, and adjust tactics in real time. This creates a faster, more sophisticated threat landscape, increasing the need for human expertise in defense and decision-making.

Reimagining SecOps and professional roles

The need for cybersecurity professionals is growing, not shrinking. AI can handle routine tasks, allowing analysts to focus on high-value work like threat hunting and risk assessment. This transformation is akin to the shift from traditional computing practices to DevOps, requiring a similar rethinking of SecOps teams and their structures.

Future of work and professional development

As AI takes on more routine tasks, the role of analysts will evolve toward engineering and strategic functions. Training and career paths will shift from repetitive tasks to on-the-job learning and mentorship. This change is urgent as the pace of attacks and defenses accelerates, requiring humans to define objectives and control mechanisms in real time.

Strategic priorities and organizational challenges

Organizations must distinguish between tasks that AI can automate, those that increase in volume, and those that grow in complexity. They must automate the first, strengthen resources for the second, and treat the third as a strategic priority. This requires rethinking professions, training, and responsibilities in a rapidly evolving AI-driven environment.

The future of work is not a zero-sum game

The future of work will not be a battle between humans and machines but a balance between automating routine tasks and preserving the skills needed for value-creating activities. In cybersecurity, the most successful organizations will use AI to enhance, not reduce, the expertise and responsibility of their security teams.