{"id":5048,"date":"2023-09-20T15:24:42","date_gmt":"2023-09-20T19:24:42","guid":{"rendered":"https:\/\/solutionsreview.com\/security-information-event-management\/?p=5048"},"modified":"2023-09-20T15:30:03","modified_gmt":"2023-09-20T19:30:03","slug":"closing-the-talent-gap-technological-considerations-for-soc-analyst-retention","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/security-information-event-management\/closing-the-talent-gap-technological-considerations-for-soc-analyst-retention\/","title":{"rendered":"Closing the Talent Gap: Technological Considerations for SOC Analyst Retention"},"content":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-5049\" src=\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2023\/09\/Closing-the-Talent-Gap-Three-Technological-Considerations-for-SOC-Analyst-Retention.jpg\" alt=\"talent gap\" width=\"800\" height=\"400\" srcset=\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2023\/09\/Closing-the-Talent-Gap-Three-Technological-Considerations-for-SOC-Analyst-Retention.jpg 800w, https:\/\/solutionsreview.com\/security-information-event-management\/files\/2023\/09\/Closing-the-Talent-Gap-Three-Technological-Considerations-for-SOC-Analyst-Retention-300x150.jpg 300w, https:\/\/solutionsreview.com\/security-information-event-management\/files\/2023\/09\/Closing-the-Talent-Gap-Three-Technological-Considerations-for-SOC-Analyst-Retention-768x384.jpg 768w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/p>\n<p><em><strong>Solutions Review\u2019s\u00a0<a class=\"fui-Link ___1idfs5o f3rmtva f1ewtqcl fyind8e f1k6fduh f1w7gpdv fk6fouc fjoy568 figsok6 f1hu3pq6 f11qmguv f19f4twv f1tyq0we f1g0x7ka fhxju0i f1qch9an f1cnd47f fqv5qza f1vmzxwi f1o700av f13mvf36 f1cmlufx f9n3di6 f1ids18y f1tx3yz7 f1deo86v f1eh06m1 f1iescvh ftqa4ok f2hkw1w fhgqx19 f1olyrje f1p93eir f1h8hb77 f1x7u7e9 f10aw75t fsle3fq f17ae5zn\" title=\"https:\/\/solutionsreview.com\/solutions-review-contributor-guidelines\/\" href=\"https:\/\/solutionsreview.com\/solutions-review-contributor-guidelines\/\" target=\"_blank\" rel=\"noreferrer noopener\" aria-label=\"Link Contributed Content Series\"><u>Contributed Content Series<\/u><\/a> is a collection of contributed articles written by thought leaders in enterprise software categories. Kayla Williams of <a href=\"https:\/\/www.devo.com\/\" target=\"_blank\" rel=\"noopener\">DEVO<\/a> presents three technological considerations to close the talent gap and retain SOC analysts.<\/strong><\/em><\/p>\n<p>Two of the most common refrains among cybersecurity leaders are that there\u2019s a major skills gap and that existing employees are burning out. According to ISC(2), there\u2019s a global workforce gap of 3.4 million people in cybersecurity. Not only are there not enough people, but those who are working in cybersecurity are at high risk for burnout. This challenge is particularly prevalent when it comes to working in the security operations center (SOC).<\/p>\n<p>For security leaders, overcoming these twin challenges is key&#8211; but it will require an understanding of just how serious the burnout threat is and of the technology and processes required to mitigate that threat.<\/p>\n<br \/>Widget not in any sidebars<br \/>\n<h2><strong>Closing the Talent Gap: Technological Considerations for SOC Analyst Retention<\/strong><\/h2>\n<hr \/>\n<h3><strong>Understanding the SOC Situation<\/strong><\/h3>\n<p>While the skills gap and burnout impact almost every single role within cybersecurity, it\u2019s especially acute in the security operations center (SOC.) A staggering 55 percent of SOC analysts have contemplated leaving their positions due to the immense pressure they experience. Historically, this role was largely focused on a lot of triage and dealing with a multitude of alerts. However, technological advances are changing the roles significantly. Today, the Tier 1 analyst role is becoming much more automated, and Tier 2 is becoming more autonomous. This is a positive development, but it\u2019s also taken a toll on the Tier 3 role, which now faces increased pressure. To be successful now, your Tier 3 analysts must be better and more experienced than they needed to be five years ago.<\/p>\n<p>This means there are fewer inroads for newbies and a higher demand for highly skilled security professionals, creating a Catch-22 situation. SOC analysts are now harder to retain, and there are fewer people coming up through the ranks to replace them. A primary reason for the tendency to burn out and leave is that they are working on tougher problems and there is a greater volume of alerts to address. Indicators of compromise (IoC) constantly change, and more IoCs are identified every day.<\/p>\n<p>At every level of the SOC, workers experience near-constant pressure; failure could have disastrous effects on the company. Even though some organizations have made progress, it\u2019s clear that SOC work is difficult and taxing. In fact, a whopping 71 percent of decision-makers and non-management staff reported a high level of discomfort experienced by staff in their SOC.<\/p>\n<h3><strong>Changing the Status Quo Starts with Your Technology Stack<\/strong><\/h3>\n<p>Evaluating your technology stack is key to addressing the challenges of SOC retention\/hiring. This starts with visibility; there\u2019s no excuse today for not having visibility across your organization. Security technologies are easy to deploy nowadays and can provide visibility across all aspects of the organization, providing logs and insights that can be aggregated in a central location. This has historically been a challenge, but that\u2019s changing now.<\/p>\n<p>Following on from that, it\u2019s not just the visibility of the data that matters&#8211; it\u2019s what you do with it. The data must be usable. Cloud-based security analytics solutions have the dynamic scalability to not only handle the ingestion of all the data but also the ability to process all that data in real-time. The ability now exists, and organizations are making investments to ensure that they can shift into a real-time alert detection investigation and response approach.<\/p>\n<p>A third step to changing the status quo is to adopt greater applications of artificial intelligence and machine learning. Today\u2019s AI\/ML tools are extremely good, and they&#8217;re going to continue to get better. That works to the advantage of those SOC teams and the CISOs who can and choose to embrace these technologies and are willing to transform their SOC teams to move from frontline human speed bumps into custodians and trainers of high-speed automated response systems.<\/p>\n<h3><strong>SOC Job Satisfaction and Retention<\/strong><\/h3>\n<p>Reviewing your tech stack will have ripple effects on SOC teams\u2019 ability to perform effectively and experience fewer of the negative aspects of their job roles. For instance, having the proper tools in place reduces the number of false alerts and \u201calert fatigue.\u201d It also enables teams to free up time for more high-value and meaningful work, like focusing more on business value\/risk because repetitive tasks have been automated.<\/p>\n<p>Managers are enabled to set aside time each week for employees to study important topics for personal and professional growth. This creates a culture of mental health and work\/life balance by demonstrating employer commitment through actions. All of these elements add up to greater job satisfaction and higher retention.<\/p>\n<h3><strong>Tapping Tech for Retention<\/strong><\/h3>\n<p>The cybersecurity skills gap and the phenomenon of SOC analyst burnout demand urgent attention. Strengthening the technology stack for real-time response is vital. Sustainable solutions also require fostering job satisfaction through meaningful work, reducing false alerts, and enabling personal growth. IT leaders must embrace advanced tools that engender well-being to retain skilled talent and effectively address industry challenges.<\/p>\n<br \/>Widget not in any sidebars<br \/>\n","protected":false},"excerpt":{"rendered":"<p>Solutions Review\u2019s\u00a0Contributed Content Series is a collection of contributed articles written by thought leaders in enterprise software categories. Kayla Williams of DEVO presents three technological considerations to close the talent gap and retain SOC analysts. Two of the most common refrains among cybersecurity leaders are that there\u2019s a major skills gap and that existing employees [&hellip;]<\/p>\n","protected":false},"author":914,"featured_media":5049,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[551,1],"tags":[],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v23.5 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Closing the Talent Gap: Technological Considerations for SOC Analyst Retention<\/title>\n<meta name=\"description\" content=\"Kayla Williams of DEVO presents three technological considerations to close the talent gap and retain SOC analysts.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/security-information-event-management\/closing-the-talent-gap-technological-considerations-for-soc-analyst-retention\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Closing the Talent Gap: Technological Considerations for SOC Analyst Retention\" \/>\n<meta property=\"og:description\" content=\"Kayla Williams of DEVO presents three technological considerations to close the talent gap and retain SOC analysts.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/solutionsreview.com\/security-information-event-management\/closing-the-talent-gap-technological-considerations-for-soc-analyst-retention\/\" \/>\n<meta property=\"og:site_name\" content=\"SIEM Tools &amp; Security Event Management | Solutions Review\" \/>\n<meta property=\"article:published_time\" content=\"2023-09-20T19:24:42+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-09-20T19:30:03+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2023\/09\/Closing-the-Talent-Gap-Three-Technological-Considerations-for-SOC-Analyst-Retention.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"800\" \/>\n\t<meta property=\"og:image:height\" content=\"400\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Kayla Williams\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Kayla Williams\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/closing-the-talent-gap-technological-considerations-for-soc-analyst-retention\/\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/closing-the-talent-gap-technological-considerations-for-soc-analyst-retention\/\",\"name\":\"Closing the Talent Gap: Technological Considerations for SOC Analyst Retention\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/closing-the-talent-gap-technological-considerations-for-soc-analyst-retention\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/closing-the-talent-gap-technological-considerations-for-soc-analyst-retention\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2023\/09\/Closing-the-Talent-Gap-Three-Technological-Considerations-for-SOC-Analyst-Retention.jpg\",\"datePublished\":\"2023-09-20T19:24:42+00:00\",\"dateModified\":\"2023-09-20T19:30:03+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/1af2da59e8d49af73067e2c8fae9cb21\"},\"description\":\"Kayla Williams of DEVO presents three technological considerations to close the talent gap and retain SOC analysts.\",\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/closing-the-talent-gap-technological-considerations-for-soc-analyst-retention\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/security-information-event-management\/closing-the-talent-gap-technological-considerations-for-soc-analyst-retention\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/closing-the-talent-gap-technological-considerations-for-soc-analyst-retention\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2023\/09\/Closing-the-Talent-Gap-Three-Technological-Considerations-for-SOC-Analyst-Retention.jpg\",\"contentUrl\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2023\/09\/Closing-the-Talent-Gap-Three-Technological-Considerations-for-SOC-Analyst-Retention.jpg\",\"width\":800,\"height\":400,\"caption\":\"talent gap\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/closing-the-talent-gap-technological-considerations-for-soc-analyst-retention\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/security-information-event-management\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Closing the Talent Gap: Technological Considerations for SOC Analyst Retention\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#website\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/\",\"name\":\"SIEM Tools &amp; Security Event Management | Solutions Review\",\"description\":\"Evaluating Enterprise SIEM Systems, Log Management Analytics &amp; SOAR Platforms.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/security-information-event-management\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/1af2da59e8d49af73067e2c8fae9cb21\",\"name\":\"Kayla Williams\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/b87cccadc4930c912edadfc9634a4c73?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/b87cccadc4930c912edadfc9634a4c73?s=96&d=mm&r=g\",\"caption\":\"Kayla Williams\"},\"description\":\"Kayla Williams is the CISO at Devo, a cloud-native logging and security analytics platform. Prior to this role, Kayla was the director of GRC at LogMeIn, a $1b global SaaS company, and the senior risk manager for Computershare US, a global financial services company, where she was responsible for supporting the development, implementation, and monitoring of operational, financial, compliance, and IT risk. Kayla currently resides in Boston, Massachusetts, and Alfreton, Derbyshire, UK.\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/author\/kwilliams\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Closing the Talent Gap: Technological Considerations for SOC Analyst Retention","description":"Kayla Williams of DEVO presents three technological considerations to close the talent gap and retain SOC analysts.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/security-information-event-management\/closing-the-talent-gap-technological-considerations-for-soc-analyst-retention\/","og_locale":"en_US","og_type":"article","og_title":"Closing the Talent Gap: Technological Considerations for SOC Analyst Retention","og_description":"Kayla Williams of DEVO presents three technological considerations to close the talent gap and retain SOC analysts.","og_url":"https:\/\/solutionsreview.com\/security-information-event-management\/closing-the-talent-gap-technological-considerations-for-soc-analyst-retention\/","og_site_name":"SIEM Tools &amp; Security Event Management | Solutions Review","article_published_time":"2023-09-20T19:24:42+00:00","article_modified_time":"2023-09-20T19:30:03+00:00","og_image":[{"width":800,"height":400,"url":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2023\/09\/Closing-the-Talent-Gap-Three-Technological-Considerations-for-SOC-Analyst-Retention.jpg","type":"image\/jpeg"}],"author":"Kayla Williams","twitter_misc":{"Written by":"Kayla Williams","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/closing-the-talent-gap-technological-considerations-for-soc-analyst-retention\/","url":"https:\/\/solutionsreview.com\/security-information-event-management\/closing-the-talent-gap-technological-considerations-for-soc-analyst-retention\/","name":"Closing the Talent Gap: Technological Considerations for SOC Analyst Retention","isPartOf":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/closing-the-talent-gap-technological-considerations-for-soc-analyst-retention\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/closing-the-talent-gap-technological-considerations-for-soc-analyst-retention\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2023\/09\/Closing-the-Talent-Gap-Three-Technological-Considerations-for-SOC-Analyst-Retention.jpg","datePublished":"2023-09-20T19:24:42+00:00","dateModified":"2023-09-20T19:30:03+00:00","author":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/1af2da59e8d49af73067e2c8fae9cb21"},"description":"Kayla Williams of DEVO presents three technological considerations to close the talent gap and retain SOC analysts.","breadcrumb":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/closing-the-talent-gap-technological-considerations-for-soc-analyst-retention\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/security-information-event-management\/closing-the-talent-gap-technological-considerations-for-soc-analyst-retention\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/closing-the-talent-gap-technological-considerations-for-soc-analyst-retention\/#primaryimage","url":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2023\/09\/Closing-the-Talent-Gap-Three-Technological-Considerations-for-SOC-Analyst-Retention.jpg","contentUrl":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2023\/09\/Closing-the-Talent-Gap-Three-Technological-Considerations-for-SOC-Analyst-Retention.jpg","width":800,"height":400,"caption":"talent gap"},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/closing-the-talent-gap-technological-considerations-for-soc-analyst-retention\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/security-information-event-management\/"},{"@type":"ListItem","position":2,"name":"Closing the Talent Gap: Technological Considerations for SOC Analyst Retention"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#website","url":"https:\/\/solutionsreview.com\/security-information-event-management\/","name":"SIEM Tools &amp; Security Event Management | Solutions Review","description":"Evaluating Enterprise SIEM Systems, Log Management Analytics &amp; SOAR Platforms.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/security-information-event-management\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/1af2da59e8d49af73067e2c8fae9cb21","name":"Kayla Williams","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/b87cccadc4930c912edadfc9634a4c73?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/b87cccadc4930c912edadfc9634a4c73?s=96&d=mm&r=g","caption":"Kayla Williams"},"description":"Kayla Williams is the CISO at Devo, a cloud-native logging and security analytics platform. Prior to this role, Kayla was the director of GRC at LogMeIn, a $1b global SaaS company, and the senior risk manager for Computershare US, a global financial services company, where she was responsible for supporting the development, implementation, and monitoring of operational, financial, compliance, and IT risk. Kayla currently resides in Boston, Massachusetts, and Alfreton, Derbyshire, UK.","url":"https:\/\/solutionsreview.com\/security-information-event-management\/author\/kwilliams\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts\/5048"}],"collection":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/users\/914"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/comments?post=5048"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts\/5048\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/media\/5049"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/media?parent=5048"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/categories?post=5048"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/tags?post=5048"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}