PETRONAS sought to elevate analyst effectiveness, eliminate repeatable manual work and accelerate response across its enterprise SOC. Solution: Advanced AI capabilities were integrated directly into analyst workflows, providing real-time incident summaries, guiding next steps, translating natural language to queries and automating context gathering. This standardizes investigation quality and enables junior analysts to contribute earlier in their career. Building on this, AI agents are being deployed that autonomously triage high-volume incidents, correlate alerts across telemetry and link anomalies with threat intelligence. These agents surface actionable patterns with structured recommendations, reducing manual correlation work. Integrated natural language intelligence look-ups provide context on threat actors, campaigns, malware families and IOCs, strengthening prioritization and proactive detection. The initiative was shaped through a six-month pilot in which use cases were prioritized based on analyst time spent, incident recurrence, task consistency and risk relevance, ensuring high-impact investment. Adoption considerations – including analyst mindset, workflow adjustments and change management needs – were addressed through continuous feedback loops. Deployment of AI agents required no new hardware, and it was scaled incrementally based on real-world performance metrics and analyst input, enabling safe AI adoption, operational continuity and value validation at each stage.