Security Operations Professional

• Basic knowledge of cybersecurity principles
• Familiarity with SOC operations or incident response fundamentals
• Understanding of networking and endpoint security concepts is recommended

There is no certification exam associated with this course.

Palo Alto Networks Certified Security Operations Professional

• Detect, investigate, and respond to security threats using Cortex XDR
• Automate SOC processes using Cortex XSOAR
• Manage incidents, alerts, and compliance within a SOC
• Understand and utilise Cortex XSIAM in daily security operations
• Apply foundational SOC practices and automation workflows

• SOC Analysts (Tier 1 and Tier 2)
• Security Operations Professionals
• Incident Responders
• Entry-level Cybersecurity Analysts
• IT professionals transitioning into security roles

• PCCET: Palo Alto Networks Certified Cybersecurity Entry‑level Technician
• PCDRA: Palo Alto Networks Certified Detection and Remediation Analyst
• PCNSA: Palo Alto Networks Certified Network Security Administrator
• PCCSE: Prisma Certified Cloud Security Engineer
• PCNSE: Palo Alto Networks Certified Network Security Engineer
• PCSAE: Palo Alto Networks Certified Security Automation Engineer

Introduction to Security Operations

• Understanding the role of a SOC
• Core components of a SOC environment
• Key security concepts and terminology

Introduction to Palo Alto Networks Security Operations Tools

• Overview of Cortex platform
• Differences between Cortex XDR, XSOAR, and XSIAM
• Integration and interoperability of tools

Cortex XDR Fundamentals

• Endpoint and network visibility
• Threat detection and investigation
• Manual and automated response actions
• Using XDR for incident management

Cortex XSOAR Essentials

• Security orchestration and automation concepts
• Playbook creation and management
• Automating alert triage and incident response
• Case management workflows

Cortex XSIAM Overview

• Unified data analytics and correlation
• Alert lifecycle management
• SOC efficiency through AI and automation
• Real-time visibility into incidents and metrics

Incident Response and Investigation

• SOC workflows and use cases
• Investigating alerts and root cause analysis
• Handling phishing, malware, and suspicious behaviors
• Mitigation and remediation practices

Vulnerability and Compliance Monitoring

• Understanding security gaps and vulnerabilities
• Ensuring compliance with organisational policies
• Reporting and documentation best practices

Hands-On Labs and Practice Scenarios

• Realistic SOC scenarios using Cortex tools
• Interactive case studies and guided labs
• Applying learned skills in simulated environments

Certification Preparation

• Review of key concepts and tools
• Practice questions and tips for the exam
• Guidance on exam registration and format