Automating the SOC: Lessons from the Front Lines | Episode 54

In this WEI Tech Talk episode, Shawn Murphy, Cybersecurity Solutions Architect at WEI, sits down with Patrick “PO” Orzechowski, Field CISO at Torq, for a candid conversation on what automation really means for modern Security Operations Centers. Drawing on more than two decades of front-line SOC leadership, Shawn and PO break down the realities of detection and response, the evolution of SOAR, and why automation is shifting from simple task execution to contextual, AI-driven decision support.Together, the experts explore:Why the core mission of the SOC still centers on visibility and control, despite expanding attack surfaces.How automation has progressed—from Perl scripts and early SOAR tools to today’s hyper-automation and agentic AI.The operational challenges of legacy playbooks, including edge-case overload and brittle integrations.How AI-powered enrichment, correlation, and human-in-the-loop workflows reduce analyst fatigue and enable faster, audit-ready response.Emerging concerns around AI identity management, model guardrails, and the long-term impact on the cybersecurity talent pipeline.If you’re a CISO, SOC leader, or risk owner looking to understand how automation reshapes MTTR, analyst workload, and long-term resilience, this discussion offers practical insight grounded in real-world experience. Learn more at wei.com/cybersecurity