Attackers hand off your network in 22 seconds. Your tier-1 analyst is still opening the ticket. That's the whole argument for the agentic SOC — and why it terrifies people. What you'll hear: • The '92%' trap — three vendors, three different metrics wearing the same number • What's actually shipping — Cisco/Splunk's six agents, CrowdStrike, Microsoft, and the AI-SOC startups • The reality check — ~17% have deployed agents; ~89% of pilots never reach production; the SIEM market grew to $19B • Where it breaks — hallucinated IOCs, cascading agent errors, and the 50% of AI error reports that get ignored • The career shift — the tier-1 seat closes, the detection engineer + AI-oversight seats open • Exam relevance — CySA+/Security+ test SOAR and when NOT to automate — Andrés Sarmiento #SOC #SIEM #cybersecurity #AIsecurity #detectionengineering #Security ...