AI for Cybersecurity Operations: Faster Threat Detection, Stronger Incident Response and Improved Security Effectiveness
About This Course
This 3-day course provides practical, hands-on training in AI-augmented security operations. Participants will learn how to apply AI across detection, incident response, threat intelligence, threat hunting and SOC automation, while addressing adversarial AI risks and governance requirements. The course uses realistic security scenarios, hands-on labs and a capstone exercise focused on designing an AI-augmented SOC for a financial institution.
What You'll Learn
• Implement AI-assisted incident triage, alert enrichment, SOAR automation and ChatOps workflows.
• Use LLM tools for threat intelligence, investigation, query generation and threat actor profiling.
• Identify adversarial AI attack vectors and apply controls to defend AI-enabled security systems.
• Conduct AI-assisted threat hunting using MITRE ATT&CK and associated detection techniques.
• Apply NIST AI RMF, MAS FEAT and AI Verify principles to AI-enabled SOC operations.
• Design and present a complete AI SOC architecture through the SecureFinance Corp capstone exercise.
Entry Requirements
At least 1 year of working experience in cybersecurity, IT operations, infrastructure support, cloud operations, security operations, incident response, or related technology functions
Foundational understanding of cybersecurity concepts including threats, vulnerabilities, risk, incidents and security monitoring
Basic awareness of Artificial Intelligence (AI) and Generative AI concepts
Familiarity with security tools, ticketing systems, SIEM platforms or security operations workflows will be advantageous
Working proficiency in Microsoft Office applications (Word, Excel, PowerPoint)
Ability to speak, listen, read and write English at a proficiency level equivalent to the Employability Skills Workforce Skills Qualification (ES WSQ) Workplace Literacy (WPL) Level 6