thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Home › Courses › Palo Alto Networks › Palo Alto Networks Cortex XSOAR: Engineering Security Automation Solutions (XSOAR-ESA)
Palo Alto NetworksPANXSOARESA

Palo Alto Networks Cortex XSOAR: Engineering Security Automation Solutions (XSOAR-ESA)

We do not teach just for the test.Worked examples and real discussion, not a question bank. The exam is then delivered in the classroom — 98% pass it first time.
$3,400catalog price — your starting point
thinQflex™Tell us what you would like to pay for this class — in full, or across twelve monthly payments.
Next date
  • 16 Nov 2026Sterling, VA
Make your offerCourse datasheet (PDF)
4 daysconsecutive days
Live onlineor in the classroom
ProfessionalSecurity
45% labs55% lecture
24 monthsfree retakes

Course overview

Download the course datasheetThe full outline for Palo Alto Networks Cortex XSOAR: Engineering Security Automation Solutions (XSOAR-ESA), as a PDF.
thinQtank® Learning is offering a unique four-day training camp comprised of four days of instructor-led learning that gives students the knowledge and skills needed to engineer security automation with Cortex XSOAR: incident management, threat intelligence, investigations, dashboards and reports, integrations, engines and load balancing, use-case planning, playbooks and scripts.

The camp follows the official Palo Alto Networks Cortex XSOAR: Engineering Security Automation Solutions (XSOAR-ESA) course outline, with hands-on labs throughout.

Palo Alto Networks, Cortex, Prisma, Panorama and Strata are trademarks of Palo Alto Networks, Inc.

This course prepares students for the Palo Alto Networks Certified XSOAR Engineer certification.

What's included

12 items
thinQtank® Learning Accelerated Custom Study Guide for Cortex XSOAR: Engineering Security Automation Solutions
Custom and focused exam preparation software and materials
Course specific thinQtank® Learning publications to promote a fun and exciting learning
Membership to the thinQtank® Learning University Online
WE DO NOT "TEACH THE TEST" - Students will receive valuable examples and discussion
All courses taught by experienced Palo Alto Networks practitioners
Additional hours of remote lab access
Custom video recordings with even more in-depth learning of course topics
Customized practice exam software
Digital courseware
Retake any or all portions of the course as many times as you like in person or live on-line for 24 months
Six months mentoring access to our engineers after completing the course

What you'll be able to do

14 objectives
  • Investigate and respond to a phishing campaign
  • Build custom dashboards and reports
  • Install engines and configure load balancing
  • Plan and build an automation use case with playbooks and scripts
  • XSOAR overview
  • Incident management
  • Threat intelligence
  • Analyst investigations
  • Dashboards, reports and timers
  • Integrations and content management
  • Architecture
  • Use case planning and implementation
  • Playbook development
  • Automation scripts

The exam

  • Supports the Palo Alto Networks Certified XSOAR Engineer certification
  • Delivered by Pearson VUE at a test center or online proctored — we help you schedule your attempt
  • Question count, time limit, passing score and fee are set by Palo Alto Networks in the official exam datasheet, which we review with you in class

Who it's for, and what you need first

Target Audience

  • SOC, SIEM and automation engineers
  • MSSPs and service delivery partners working with XSOAR
  • Service members, veterans and military spouses using AF COOL, Army Credentialing Assistance, MyCAA or VET TEC 2.0

Prerequisites

  • Networking basics, such as private IPs and domains
  • Cybersecurity basics, such as indicators of compromise
  • Comfort with Windows and Linux, GUI and command line

How it's delivered

Instructor-Led Training
Immersive Live-Online Training
On-Site and Custom Delivery

Dates and locations

21 scheduled
Prices shown are MSRP. Qualified military personnel funding through Air Force COOL, Army Credentialing Assistance, MyCAA or VET TEC 2.0 pay a flat $1,500 per class, whatever the listed price. Everyone else — call 855-868-4467 about group pricing, discounts and current promotions.