The AI Augmented SOC: Balancing Technology, Talent, and Trust

In this episode, Dr. Dave Chatterjee speaks with Will Ledesma, Director of MDR Cybersecurity Operations at Adlumin, a veteran SOC leader and cyber defender with over two decades of experience in enterprise security and the U.S. Air Force Reserves. Ledesma shares his journey from IT systems administration to frontline cyber defense, and offers hard-earned insights into the realities of Security Operations Centers (SOCs) in the age of artificial intelligence.

The conversation explores how AI is transforming SOC effectiveness—from triaging millions of processes in seconds to surfacing hidden indicators of compromise. But the central message is clear: AI must serve as an enabler, not a replacement, for human judgment. Drawing on the CPD framework, the discussion highlights that the future SOC is founded on leadership commitment to responsible adoption, preparedness through data pipelines and training, and disciplined guardrails to maintain AI within safe operational boundaries.

Time Stamps

·      00:48 — Dave’s setup: AI’s impact on SOC operations and burnout.

·      02:22 — Will’s origin story and pivot into cybersecurity.

·      05:56 — “Augment the human”: keeping people in the loop.

·      08:40 — Beyond enrichment: faster intel + compiled investigations.

·      11:20 — Human governance and control of agentic AI.

·      13:30 — Auto‑remediation tools: potential and limits.

·      17:15 — Incident case: 10 IOCs in 60 min vs. 13 in ~10 sec with AI.

·      21:40 — Scaling to millions of processes → four prioritized leads.

·      22:34 — KPIs: AI handling ~70% of detections; QA and MT* metrics.

·      26:52 — Platform vs. best‑of‑breed: avoid single failure domains.

·      28:29 — Outsourcing SOC: costs, vendor selection, oversight.

·      34:19 — CPD framework applied to AI in the SOC.

To access and download the entire podcast summary with discussion highlights - https://www.dchatte.com/episode-92-the-ai-augmented-soc-balancing-technology-talent-and-trust/

Connect with Host Dr. Dave Chatterjee

LinkedIn: https://www.linkedin.com/in/dchatte/

Website: https://dchatte.com/

Books Published

The DeepFake Conspiracy

Cybersecurity Readiness: A Holistic and High-Performance Approach

Articles Published

Ramasastry, C. and Chatterjee, D. (2025). Trusona: Recruiting For The Hacker Mindset, Ivey Publishing, Oct 3, 2025.

Chatterjee, D. and Leslie, A. (2024). “Ignorance is not bliss: A human-centered whole-of-enterprise approach to cybersecurity preparedness,” Business Horizons, Accepted on Oct 29, 2024.

Isik, O., Chatterjee, D., and Lourenco, D.A. (2024). “Getting Cybersecurity Right,” California Management Review — Insights, Accepted for Publication, July 8, 2024. 

Chatterjee, D. (2023). “Mission critical – How American Cancer Society successfully and securely migrated to the cloud amid the pandemic,” I by IMD, March 13, 2023.

Chatterjee, D. (2022). “Preventing security breaches must start at the top,” I by IMD, September 28, 2022, Institute for Management Development, Lausanne, Switzerland

Chatterjee, D. (2022). “Making Cybersecurity Readiness Mainstream,” Executive Blog Post, NETSPI, March 1, 2022

Benz, M. and Chatterjee, D. (2020). “Calculated Risk? A Cybersecurity Evaluation Tool for SMEs,” Business Horizons, available online from May 4, 2020

Chatterjee, D. (2019). “Should Executives Go To Jail Over Cyber Attacks,” Journal of Organizational Computing and Electronic Commerce, Vol 29, Issue 1, pp. 1-3.

Abraham, C., Chatterjee, D., and Sims, R. (2019). “Muddling through cybersecurity: Insights from the U.S. healthcare industry,” Business Horizons, July 2019.