Why the autonomous SOC Is the wrong goal

About this episode

The episode discusses the challenges and considerations of implementing AI in security operations with insights from Mike Nichols.

On this week's episode, we're joined by Mike Nichols, General Manager of Security at Elastic, fresh off the Gartner Security and Risk Summit in the D.C. area, where AI dominated every conversation on the conference floor. Mike walks us through what CISOs are actually asking about, what a real agentic SOC looks like in practice, and why keeping humans on the loop is the key philosophical distinction that separates a thoughtful AI implementation from a reckless one. The conversation covers "tribal knowledge," shadow AI, prompt injection, model sovereignty, and the exploding attack surface that AI agents themselves create, with Mike making the case that AI adoption is a dial and not a switch, and that transparency, explainability, and a healthy dose of skepticism are the foundation of building trust that actually sticks.

People in this episode

Guest: Mike Nichols

Topics covered

• autonomous SOC
• AI in security
• CISO concerns
• human oversight
• AI adoption
• trust in AI

Keywords

• autonomous SOC
• AI
• CISO
• security
• trust
• transparency
• explainability
• attack surface

Mentioned in this episode

Organizations: Elastic, Gartner

Places: D.C.

More episodes of Safe Mode Podcast

• The last layer standing · June 4, 2026 · 36 min
• From Two Weeks to Three Days: The KEV Deadline Debate · May 29, 2026 · 37 min
• Can specialized security survive Daybreak and Mythos? · May 21, 2026 · 38 min
• Why access brokers have stubbornly remained successful · May 14, 2026 · 32 min
• Can you prove which agent did what? · May 7, 2026 · 28 min
• How government and Industry can raise the cost of cybercrime · April 30, 2026 · 43 min