ai · security · skills

Why reskill

AI is already replacingrepetitive engineering workflows.

Not the engineers,but their old way of working.

Somebody already built your job. Not to take it: to do the part of it that was always a model, a memory, and a set of permissions. What is left over is the part nobody was ever trained for, and that is what this page is about.

01

The org changes shape

Every function has moved one rung: the agents run the loop inside their scope, and the humans supervise by exception. Same eight people you already employ. Eighteen roles that used to be job descriptions.

One accountable human. The chair that cannot become an agent.
The orchestration layer. Routes the work, holds the handoffs.
A human lead per function. Supervising by exception rather than doing the work.
Bounded agents underneath. Every one a job description that exists today.
The seam, new. Owns what falls between the functions. No curriculum exists for it.

Identity & Access, opened

one human lead · 3 agents underneath

Access intentCredential lifecycleSponsor register

Nobody in that picture is doing the job they trained for. That is the whole reskilling problem, and it arrives on one Monday.

02

The same four parts, every time

Take any shipped security agent apart and the same four pieces fall out. Here is the best documented one, in its own vendor’s words.

That is the whole recipe. Three of the four parts are engineering, and any competent team can build them. The fourth is a person, and it is the part nobody has been trained for.

A person, taken apart

The agent gets three. Tap a part for the receipt.

A personThe agentA BOUNDED TOOLA MEMORYA RULEA HUMAN WHO SIGNSThree of the four cross. Tap a part for the receipt.

A human who signs, in Microsoft’s Phishing Triage Agent, in Defender · Source

True positives stay open for a person. Only an administrator can change the agent identity, reject a lesson, or remove the agent. It classifies. It does not decide.

03

Your job, as a spec sheet

Your seat, rewritten in the same four parts: a model, a memory, a set of tools, and a signature. The first three are exactly what an agent is made of, which is not a metaphor. The fourth is you.

Identity Security practitioner

ModelAccess lifecycle, privileged access, and non-human identity for AI systems.
MemoryIdentity & Access Management
ToolsInventory every identity, human or not · Separate duties so no identity does it all · Grant AI the least privilege it needs · Provision access deliberately, including for agents
SignatureStays with you. This is the part to train now.

Three of your seat’s four parts convert, which is why a role converts. The signature does not. That part stays with you.

Score yourself on this seat: Identity Security practitioner

04

They already shipped it

Vendors put security agents into production inside a year, every one behind a paid tier. Three of them, in the order they landed.

Feb 2025CrowdStrike · Charlotte AI Detection Triage
Jan 2026GitLab · Duo Security Analyst Agent
Jun 2026Microsoft · Phishing Triage Agent, in Defender

Security and risk lead every survey of what AI decision-makers worry about, and readiness sits right behind it.

Every receipt: the products, the dates, the tiers, and the vendor pages that prove them →

05

So what stops us

Nothing structural stopped this being built, and nothing structural stops you. The engineering was small. Deciding what the agent would never be permitted to do was the work.

Here is one running on our own infrastructure, and the honest detail is the interesting one: three tools, no delete, and the dangerous verbs were never on its list.

That is easy to say and worth cashing out. The engineering is six layers deep, and each one asks for a competence you can name, practise, and go and read about today.

What this asks of you

Nobody lost a job. Everybody got a different one.

The part of a role that was reasoning, accumulated experience and permission to act is being reproduced, and reproduced well. The part that was accountability is not, because you cannot fire an agent, sue one, or accept its signature. That part was never in the job description, never taught, and never assessed.

It arrives all at once, on the day a function crosses from assisted to augmented. That is the reskilling problem, and it is a training problem rather than a threat.