Skip to content

DEF CON 34 talks are here: 354 talks, summarized and searchable.

Browse DEF CON 34

True or False? - AI Will Take Your Cybersecurity Job

Marcus Carey

AI SecurityTalks53 minBeginnerOpen on YouTube ↗

Where

Talks
LASCON 2024

Duration

53 min

Weighs which cybersecurity roles AI may replace and which it can augment, with demos of AI-assisted analyst workflows.

Summary

Marcus Carey opens by dropping slides for a live, demo-driven session and asks whether AI will take cybersecurity jobs. His answer is that the bigger risk comes from people who do not learn to use AI well. He argues that professionals who ignore the technology will fall behind colleagues who work with it.

The middle of the talk centres on a security operations example. Carey describes how an analyst triaging a ticket often checks several lookup sites by hand, and he argues that a model connected to those services through an API can gather the same data in about a minute, leaving the analyst to make the judgement calls. He then walks through techniques in Claude and ChatGPT: asking the model how to write better prompts, saving reusable instructions in project settings, loading policy documents and source code into large context windows, and having the model match a person's writing tone. He also shows a custom GPT and a voice interaction.

The closing section covers limits. Carey stresses that models hallucinate, so outputs need checking and human judgement, and he notes that data handling depends on vendor enterprise or private options and on what a client permits. His takeaway is to treat AI as a capable but inexperienced assistant, keep building your own expertise, and use these tools to advance your career.

Related talks