
Overview
The Palo Alto Networks Cortex XSOAR: Engineering Security Automation Solutions course is a four-day instructor-led training with a blend of lectures and hands-on labs.
Successful completion of course should enable students to integrate their existing security tools with Cortex XSOAR to streamline security processes, accelerate security outcomes, and automate manual security-oriented tasks.
Skills Covered
- Conduct incident investigation and response activities on a phishing campaign
- Create custom dashboards and generate reports
- Install multiple engines and configure a load balancing group
- Use built-in and external integrations to ingest incidents and automate security processes
- Plan and implement an automation use case by building playbooks and automation scripts
Prerequisites
Participants should have a basic understanding of:
- Networking concepts, such as identifying private IPs and domains
- Cybersecurity concepts, such as Indicators of Compromise
- Navigating Windows and Linux environments using the GUI and CLI
Target Audience
- SOC / SIEM / Automation Engineers
- MSSPs and Service Delivery Partners working with XSOAR

- Module 0: Course Introduction
- Module 1: XSOAR Overview
- Module 2: Incident Management
- Module 3: Threat Intelligence
- Module 4: Analyst Investigations
- Module 5: Dashboards, Reports, and Timers
- Module 6: Integrations and Content Management
- Module 7: Architecture
- Module 8: Use Case Planning and Implementation
- Module 9: Playbook Development
- Module 10: Automation Scripts
Dates & Locations
June 22, 2026 - June 25, 2026
June 22, 2026 - June 25, 2026
September 7, 2026 - September 10, 2026
September 7, 2026 - September 10, 2026
December 1, 2026 - December 4, 2026
December 1, 2026 - December 4, 2026

Exam & Certification
Palo Alto Networks Certified XSOAR Engineer
This certification validates experienced security operations engineers on their knowledge, skills, and abilities in onboarding, deployment, integration, playbook creation and automation scripting, content lifecycle management, and system troubleshooting using Cortex XSOAR in security operations environments.
This certification is designed for security operations engineers, security engineers, XSOAR specialists, SOC engineers, automation engineers, playbook developers, security architects, and support engineers responsible for deploying, configuring, integrating, managing, and troubleshooting Cortex XSOAR environments.
Training & Certification Guide
Frequently Asked Questions
Speak to a Training Consultant
All courses are HRD Claimable.
Get in touch with our team via the form or WhatsApp us on +6011-5119 6631























