u/jpeterson7755

Hi r/sophos 👋  
 
We're live. I'm John Peterson, CTO at r/sophos , here to take your questions on AI, the agentic SOC, and the engineering decisions behind how we're building (and defending against) frontier AI.

Drop them below - we'll be responding in real time. 

⏰ Live Response Window

• Tuesday, June 23 
• 13:00–15:00 BST | 08:00–10:00 EDT | 12:00–14:00 UTC
• I'll circle back to additional questions over the following 24 hours

 

💬 What to ask

• What an agentic SOC actually looks like once it's running real workflows 
• Securing the AI footprint enterprises are rapidly building (copilots, agents, model APIs, MCP servers), and where the biggest risks are showing up 
• Human-in-the-loop, human-on-the-loop, and where those models actually hold up in production
• The engineering trade-offs of building AI-driven security, including what didn't work

📌 A few housekeeping notes

• Keep questions focused on cybersecurity and AI
• Don’t share sensitive configuration or environment details
• This is a discussion, not a support session, but i aim to be as helpful as possible and if it’s related to my world, i'm happy to help with any issues you may be having. If not i can triage you to our support function or the correct team
• Be respectful, even when you disagree

 

Let's get into it.

https://preview.redd.it/baw4bkaqu09h1.jpg?width=1200&format=pjpg&auto=webp&s=55798967e996c5c785713465f72f793d0579998c

Hi everyone,
There's a version of the AI-in-security conversation that happens on keynote stages, and a different one that happens at 2 a.m. when an analyst is reading an agent's output and deciding whether to trust it. I'd rather have the second one.

I'm John Peterson, CTO at Sophos. I lead the engineering and AI strategy behind our products and services, which puts me at the intersection of two questions I’m constantly coming back to: where can AI act on its own in a SOC, and how to maintain human accountability across the entire system.

Things I’d like to dig into with you:
• What an agentic SOC actually looks like once it's running real workflows
• Securing the AI footprint enterprises are rapidly building (copilots, agents, model APIs, MCP servers), and where the biggest risks are showing up
• Human-in-the-loop, human-on-the-loop, and other human/loop models
• The engineering trade-offs of building AI-driven security, including what didn’t work

No slides. No sales pitch. If a question is uncomfortable, ask it anyway.

Date: Tuesday, June 23 
Time: 08:00 EST | 12:00 UTC 
Join us live.** **

John P.