It depends on the role. In a security operations center (SOC), detection and automation engineers often write rules, queries, and scripts, and traditional investigations rely on query languages. Agentic SOC platforms reduce that burden by letting analysts investigate and threat hunt in natural language instead of writing queries.
Back to Security Concepts
Does SOC require coding?
A quick answer to a common question about security operations.