Why Incident Response Demand Will Grow Faster Than Expected
Sophos, Tuesday, October 20th, 2026
Sophos argues AI-scaled attacks will drive incident response demand beyond forecasts, so the industry must develop analysts now.
Sophos VP of Professional Services Dan Levesque argues incident response demand could grow faster than the commonly cited 20% figure for cybersecurity talent.
He points to firms hiring IR analysts, partners expanding teams and DFIR firms seeking overflow help, and says AI is helping attackers scale existing techniques.
He cites a Sophos finding that 67% of 661 analyzed intrusions began with compromised credentials or identity tactics.
Levesque says AI will make responders more productive but not replace them.