Security Operations Engineer II

Axon Enterprise; Scottsdale (AZ, WA); In loco; USD 96.000 - 154.000; Tempo pieno

Vantaggi offerti da questo lavoro

Competitive salary + 401k match

Discretionary paid time off

Parental leave

Fitness programs

Mental wellness support

Employee resource groups

Snacks in offices

Descrizione del lavoro

Axon Enterprise is seeking a Security Operations Engineer II to join the SOC, monitoring, investigating, and responding to security events across Axon’s environments. You will build automation, playbooks, and detections, and own incidents from initial findings through remediation.

The role emphasizes scalable security tooling and measurable impact on response times. Location is onsite at Scottsdale, AZ or Seattle, WA, reporting to the Manager, Information Security Engineering.

Competenze

• 2+ years of experience in security engineering, SOC or detection engineering, or software or infrastructure roles with a security focus.
• Strong skills in python, shell scripting, git, and experience shipping and maintaining production code.
• Hands-on incident response and alert triage experience, and comfort participating in an on-call rotation.
• Experience with a SIEM, log analytics platform, or SOAR or workflow automation platform.

Mansioni

• Investigate and respond to security alerts, security tickets, and user-reported phishing as part of the team's shared queue rotation.
• Participate in the on-call rotation, investigating, containing, and coordinating escalated security events such as exposed credentials, data spillage, suspicious account activity, and cloud account compromise.
• Own incidents through to closure: timeline, root cause, remediation tracking, and a detection or playbook update so the same issue is caught faster next time.
• Identify repetitive, manual work and replace it with automation, such as phishing triage and enrichment, offboarding verification, vulnerability remediation tracking, and bulk ticket handling.
• Write, tune, and document detections against security logs, retire noisy alerts, and write a runbook for every alert you ship.
• Support identity and access operations, including offboarding, access requests, and access reviews, and automate the checks that keep them reliable.
• Produce audit and compliance evidence, and automate its collection wherever possible.

Conoscenze

Python

Shell scripting

Git

Incident response

SIEM/SOAR

Cloud platforms

Infrastructure as Code

CI/CD pipelines

Runbooks

Security automation

Strumenti

CI/CD tooling

Automation platforms

Descrizione del lavoro

Scottsdale, Arizona, United States; Washington, United States

Join Axon and be a Force for Good.

At Axon, we’re on a mission to Protect Life. We’re explorers, pursuing society’s most critical safety and justice issues with our ecosystem of devices and cloud software. Like our products, we work better together. We connect with candor and care, seeking out diverse perspectives from our customers, communities and each other.
Life at Axon is fast-paced, challenging and meaningful. Here, you’ll take ownership and drive real change. Constantly grow as you work hard for a mission that matters at a company where you matter.

Your Impact

As a Security Operations Engineer II, you will be an engineer-first member of Axon's Security Operations Center, the team that monitors, investigates, and responds to security events across Axon's corporate, cloud, and regulated SaaS environments, which serve public safety agencies and enterprises around the world. You will respond to alerts, triage incidents, and participate in the on-call rotation, and use what you learn about day-to-day SOC operations to automate the repetitive work that slows response. You will build automation playbooks, tool integrations, and threat detections, and lead incidents from initial findings through root cause analysis and remediation, turning each one into better detections and playbooks. As automation takes over repeat work, more of your time goes to building the capabilities that let the SOC scale with Axon's growth.

Location:Onsite at our Scottsdale, AZ or Seattle, WA office
Reports to: Manager, Information Security Engineering
Direct Reports:None

Your Day-to-Day:

• Investigate and respond to security alerts, security tickets, and user-reported phishing as part of the team's shared queue rotation.
• Participate in the on-call rotation, investigating, containing, and coordinating escalated security events such as exposed credentials, data spillage, suspicious account activity, and cloud account compromise.
• Own incidents through to closure: timeline, root cause, remediation tracking, and a detection or playbook update so the same issue is caught faster next time.
• Identify repetitive, manual work and replace it with automation, such as phishing triage and enrichment, offboarding verification, vulnerability remediation tracking, and bulk ticket handling.
• Write, tune, and document detections against security logs, retire noisy alerts, and write a runbook for every alert you ship.
• Support identity and access operations, including offboarding, access requests, and access reviews, and automate the checks that keep them reliable.
• Produce audit and compliance evidence, and automate its collection wherever possible.

What You’ll Do:

• Design, build, and operate security automation using version control, code review, testing, and CI/CD, including automation playbooks, chat-based workflows, and services that connect security tools.
• Integrate security, identity, IT service management, and cloud platforms through their APIs, handling authentication and secrets securely.
• Own the detection lifecycle: onboard new log sources, write and tune detections, find coverage gaps, and manage detections as code.
• Deploy and maintain the cloud infrastructure behind security tooling using infrastructure-as-code and least-privilege design.
• Build detections and automation that meet strict data-handling and compliance requirements.
• Turn incident lessons into reusable playbooks, templates, and tooling that make response consistent across the team.
• Evaluate new security tooling, including automation platforms and AI-assisted triage, for fit, security, and licensing, and take selected tools into production.
• Measure team workload and the time automation saves, and report metrics that show where to invest next.
• Partner with senior team members on platform design decisions while assisting more junior team members with scripting and automation.

What You Bring:

• 2+ years of experience in security engineering, SOC or detection engineering, or software or infrastructure roles with a security focus.
• Strong skills in python, shell scripting, git, and experience shipping and maintaining production code.
• Hands‑on incident response and alert triage experience, and comfort participating in an on‑call rotation.
• Experience with a SIEM, log analytics platform, or SOAR or workflow automation platform.
• Working knowledge of cloud platforms, identity providers, endpoint detection and response (EDR), and REST APIs and authentication.
• Experience with infrastructure-as-code tools.
• Experience with Git-based collaborative development, including branching, pull requests, and code review.
• Experience building and maintaining production CI/CD pipelines.
• Understanding of the software development lifecycle and application design, with a habit of writing maintainable, tested code.
• Familiarity with secure development practices such as dependency scanning, secrets scanning, and managing secrets in pipelines.
• Clear written communication for runbooks, incident timelines, and audit evidence.
• Must be able to pass a standard FBI background check for access to Criminal Justice Information Systems.

Benefits that Benefit You

• Competitive salary and 401k with employer match
• Discretionary paid time off
• Paid parental leave for all
• Fitness Programs
• Emotional & Mental Wellness support
• Employee Resource Groups (ERGs)
• And yes, we have snacks in our offices

Benefits listed herein may vary depending on the nature of your employment and the location where you work.

Axon is a total compensation company, meaning compensation is made up of base pay, bonus, and stock awards. The actual base pay is dependent upon many factors, such as: level, function, training, transferable skills, work experience, business needs, geographic market, and often a combination of all these factors. Our benefits offer an array of options to help support you physically, financially and emotionally through the big milestones and in your everyday life. To see more details on our benefits offerings please visit https://www.axon.com/careers .

Axon is a total compensation company, meaning compensation is made up of base pay, bonus, and stock awards. The actual base pay is dependent upon many factors, such as: level, function, training, transferable skills, work experience, business needs, geographic market, and often a combination of all these factors. Our benefits offer an array of options to help support you physically, financially and emotionally through the big milestones and in your everyday life. To see more details on our benefits offerings please visit https://www.axon.com/careers .

Base Pay Range

$96,000 - $153,600 USD

Don’t meet every single requirement? That's ok. At Axon, we Aim Far. We think big with a long-term view because we want to reinvent the world to be a safer, better place. We are also committed to building diverse teams that reflect the communities we serve.

Studies have shown that women and people of color are less likely to apply to jobs unless they check every box in the job description. If you’re excited about this role and our mission to Protect Life but your experience doesn’t align perfectly with every qualification listed here, we encourage you to apply anyway. You may be just the right candidate for this or other roles.

The above job description is not intended as, nor should it be construed as, exhaustive of all duties, responsibilities, skills, efforts, or working conditions associated with this job. The job description may change or be supplemented at any time in accordance with business needs and conditions.

Some roles may also require legal eligibility to work in a firearms environment.

Axon’s mission is to Protect Life and is committed to the well‑being and safety of its employees as well as Axon’s impact on the environment. All Axon employees must be aware of and committed to the appropriate environmental, health, and safety regulations, policies, and procedures. Axon employees are empowered to report safety concerns as they arise and activities potentially impacting the environment.

We are an equal opportunity employer that promotes justice, advances equity and fosters inclusion. We’re committed to hiring the best talent — regardless of race, creed, color, ancestry, religion, sex (including pregnancy), national origin, sexual orientation, age, citizenship status, marital status, disability, gender identity, genetic information, veteran status, or any other characteristic protected by applicable laws, regulations and ordinances — and empowering all of our employees so they can do their best work. If you have a disability or special need that requires assistance or accommodation during the application or the recruiting process, please email [e-mail]. Please note that this email address is for accommodation purposes only. Axon will not respond to inquiries for other purposes.