Security Operations Architect Course Training | FCCS in Security Operations Certification

In this course, you will learn how to design, deploy, and manage a Fortinet SOC solution using FortiSIEM and FortiSOAR. You will learn how to analyze and respond to security incidents according to industry best practices for incident handling. You will also learn about SOC playbook development, threat hunting, and how to incorporate FortiAI in your workflow.

Product Versions:

FortiSOAR 7.6

Exam:

This course prepares you for the Fortinet NSE 7 – Security Operations 7.6 Architect.

Associated Certifications:

This course is intended to help you prepare for the Fortinet NSE 7 – Security Operations Architect exam. This exam is part of the FCSS Security Operations certification track.

Describe the main functions and roles within a SOC
Identify the challenges that can be solved by the Fortinet SOC
Describe the MITRE ATT&CK Enterprise Matrix and the Cyber Kill Chain
Describe how to identify and reduce the attack surface
Describe common attack vectors
Describe the benefits of using FortiSIEM and FortiSOAR
Describe different Fortinet SOC deployment architectures
Describe the FortiSOAR Content Hub and connectors
Describe FortiAI features
Describe FortiAI in FortiSIEM and FortiSOAR
Describe reactive and proactive threat hunting processes
Generate threat hunting hypotheses
Identify and configure data sources
Configure data ingestion
Configure FortiSIEM rules
Execute attack vectors
Describe the NIST SP 800-61 incident handling process
Describe the incident handling workflow with FortiSIEM and FortiSOAR
Analyze, handle, and tune incidents on FortiSIEM
Ingest FortiSIEM incidents into FortiSOAR for incident handling
Escalate FortiSOAR alerts into incidents
Describe automation requirements
Describe FortiSOAR playbook steps
Run playbooks to enrich indicators
Configure a playbook to retrieve a hash rating from FortiSandbox
Perform containment on FortiGate, Windows Active Directory, and FortiClient EMS using FortiSOAR connectors
Eradicate artifacts from a compromised host
Release a compromised host from quarantine after recovery
Manage playbook history logs

SOC Concepts and Security Frameworks
Fortinet SOC with FortiSIEM and FortiSOAR
Incident Handling and FortiSIEM
Incident Handling and FortiSOAR
SOC Playbook Development
Threat Hunting

Security professionals involved in the design, implementation, operation, and monitoring of Fortinet SOC solutions using FortiSIEM and FortiSOAR should attend this course.

You must have an understanding of the topics covered in the FortiSIEM Analyst course, or have equivalent experience.

Overview

Product Versions:

FortiSOAR 7.6

Exam:

This course prepares you for the Fortinet NSE 7 – Security Operations 7.6 Architect.

Associated Certifications:

This course is intended to help you prepare for the Fortinet NSE 7 – Security Operations Architect exam. This exam is part of the FCSS Security Operations certification track.

Objective

Describe the main functions and roles within a SOC
Identify the challenges that can be solved by the Fortinet SOC
Describe the MITRE ATT&CK Enterprise Matrix and the Cyber Kill Chain
Describe how to identify and reduce the attack surface
Describe common attack vectors
Describe the benefits of using FortiSIEM and FortiSOAR
Describe different Fortinet SOC deployment architectures
Describe the FortiSOAR Content Hub and connectors
Describe FortiAI features
Describe FortiAI in FortiSIEM and FortiSOAR
Describe reactive and proactive threat hunting processes
Generate threat hunting hypotheses
Identify and configure data sources
Configure data ingestion
Configure FortiSIEM rules
Execute attack vectors
Describe the NIST SP 800-61 incident handling process
Describe the incident handling workflow with FortiSIEM and FortiSOAR
Analyze, handle, and tune incidents on FortiSIEM
Ingest FortiSIEM incidents into FortiSOAR for incident handling
Escalate FortiSOAR alerts into incidents
Describe automation requirements
Describe FortiSOAR playbook steps
Run playbooks to enrich indicators
Configure a playbook to retrieve a hash rating from FortiSandbox
Perform containment on FortiGate, Windows Active Directory, and FortiClient EMS using FortiSOAR connectors
Eradicate artifacts from a compromised host
Release a compromised host from quarantine after recovery
Manage playbook history logs

Outline

SOC Concepts and Security Frameworks
Fortinet SOC with FortiSIEM and FortiSOAR
Incident Handling and FortiSIEM
Incident Handling and FortiSOAR
SOC Playbook Development
Threat Hunting

Target audience

Security professionals involved in the design, implementation, operation, and monitoring of Fortinet SOC solutions using FortiSIEM and FortiSOAR should attend this course.

Prerequisites

You must have an understanding of the topics covered in the FortiSIEM Analyst course, or have equivalent experience.

Päivämäärille

` 8 Dec - 9 Dec, 2025
` 5 Jan - 6 Jan, 2026
` 2 Feb - 3 Feb, 2026
` 2 Mar - 3 Mar, 2026
` 30 Mar - 31 Mar, 2026
` 27 Apr - 28 Apr, 2026

Security Operations Architect

Päivämäärille

Follow Up Courses

Cloud Security for Azure

FortiSwitch

OT Security

Public Cloud Security Architect

FortiEDR

FortiSandbox Administrator

FortiWeb Administrator

FortiADC Administrator

Network Security Support Engineer

FortiSASE Administrator

Know someone who´d be interested in this course?
Let them know...

Security Operations Architect

Päivämäärille

Follow Up Courses

Cloud Security for Azure

FortiSwitch

OT Security

Public Cloud Security Architect

FortiEDR

FortiSandbox Administrator

FortiWeb Administrator

FortiADC Administrator

Network Security Support Engineer

FortiSASE Administrator

Know someone who´d be interested in this course? Let them know...

Know someone who´d be interested in this course?
Let them know...