Cortex XSOAR: Engineering Security Automation Solutions (XSOAR-ESA) Training

This course trains security engineers to build, integrate, and automate incident response workflows using Cortex XSOAR and hands-on labs.

📘 Palo Alto 👥 2163 Enrolled ⏱️ 4 Days ⭐ 5 | 248 Reviews

Why Microtek Learning?

500+

Courses

10+ Years

Experience

95K+

Global Learners

Virtual Instructor-Led Training

$3895

Course Overview

The Cortex XSOAR: Engineering Security Automation Solutions course is a four-day, instructor-led training that combines expert-led instruction with hands-on labs. This course is designed to help security professionals design, build, and operate advanced security automation solutions using Cortex XSOAR.

Throughout the course, participants will gain practical experience conducting incident investigation and response, including managing phishing campaigns. Learners will develop skills to create custom dashboards and reports, deploy and manage multiple XSOAR engines with load balancing, and integrate Cortex XSOAR with built-in and external data sources to automate security operations.

The course also focuses on planning and implementing real-world automation use cases, guiding participants through the creation of playbooks and automation scripts that streamline incident response and operational workflows.

Course Update Notice:

This is an update and replacement for the previous (EDU-380) Cortex XSOAR: Automation and Orchestration. Private EDU-380 classes (based on Cortex XSOAR 6.8) are available upon request.

Mode of Training

🏫 Classroom 💻 Live Online 🧪 Blended 👨‍👩‍👧‍👦 Private Group

Upcoming Schedules

Start Date	Time	Duration	Mode	Price
May 11, 2026	9:00 am - 5:00 pm EDT	4 Days	online	$3895	GTR
Jul 20, 2026	9:00 am - 5:00 pm CDT	4 Days	online	$3895	GTR
Sep 21, 2026	9:00 am - 5:00 pm EDT	4 Days	online	$3895	GTR
Nov 02, 2026	9:00 am - 5:00 pm PDT	4 Days	online	$3895	GTR

+ View more schedules

What you will learn

Integrate existing security tools and data sources with Cortex XSOAR
Investigate and respond to security incidents, including phishing campaigns
Build and customize playbooks and automation scripts for incident response
Use built-in and external integrations to automate security workflows
Deploy and manage multiple Cortex XSOAR engines with load balancing
Create custom dashboards and generate operational and executive reports

Who Should Attend This Course?

SOC / SIEM / Automation Engineers
MSSPs and Service Delivery Partners working with XSOAR

Certifications

This course is part of the following Certifications:

Palo Alto Networks XSOAR Engineer

Prerequisites

Participants should have a basic understanding of:

Networking concepts, such as identifying private IPs and domains
Cybersecurity concepts, such as Indicators of Compromise
Navigating Windows and Linux environments using the GUI and CLI

Course Content

Course Modules:

0 - Course Introduction
1 - XSOAR Overview
2 - Incident Management
3 - Threat Intelligence
4 - Analyst Investigations
5 - Dashboards, Reports, and Timers
6 - Integrations and Content Management
7 - Architecture
8 - Use Case Planning and Implementation
9 - Playbook Development
10 - Automation Scripts

📞 Talk to a Learning Advisor

Still have questions?

Reach out to our learning advisors for personalized guidance on choosing the right course, group training, or enterprise packages.

📞 Talk to an Advisor

What You Get with Microtek Learning

Instructor-Led Excellence

✓ Certified Instructor-led Training
✓ Top Industry Trainers
✓ Official Student Handbooks

Measurable Learning Outcomes

✓ Pre- & Post-Training Assessments
✓ Practice Tests
✓ Exam-Oriented Curriculum

Real-World Skill Building

✓ Hands-on Activities & Scenarios
✓ Interactive Online Courses
✓ Peer Collaboration (Not in self-paced)

Full Support & Perks

✓ Exam Scheduling Support ^*
✓ Learn & Earn Program ^*
✓ Support from Certified Experts
✓ Gov. & Private Pricing ^*

Our Clients

For over 10 years, Microtek Learning has helped organizations, leaders, students and professionals to reach their maximum potential. We have led the path by addressing their challenges and advancing their performances.