Security Operations Engineer II — Automate & Detect at Scale

VulnU; Scottsdale (AZ); Presencial; USD 96.000 - 154.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Paid parental leave

Flexible PTO

Retirement match

Equity

Descripción de la vacante

Axon is seeking a Security Operations Engineer II to join its SOC. You will investigate alerts across Axon's global environment, own incidents end-to-end, and drive automation to scale the SOC.

This role emphasizes building detections and playbooks and collaborating across cloud, identity, and IT systems to improve security posture. You will contribute to on-call duties, develop automation, and deliver measurable improvements in response times and coverage.

Formación

• 2+ years of security engineering, SOC or detection engineering experience or security-focused software/infrastructure roles.
• Hands-on incident response and alert triage experience, on-call rotation.
• Experience with a SIEM, log analytics platform, or SOAR/workflow platform.
• Cloud platform knowledge, identity providers, EDR, REST APIs and authentication.
• Experience with infrastructure-as-code tools.

Responsabilidades

• Investigate and respond to security alerts, tickets, and phishing reports as part of the SOC rotation.
• Own incidents through to closure: timeline, root cause, remediation tracking, and updating detections/playbooks.
• Identify repetitive manual work and replace with automation (phishing triage, offboarding verification, remediation tracking).
• Write, tune, and document detections; retire noisy alerts; maintain runbooks for alerts.
• Produce audit evidence and automate its collection.

Conocimientos

Python

Shell scripting

Git

Incident response

SIEM

Cloud platforms

REST APIs

Infrastructure as code

CI/CD

Secure development

Herramientas

SOAR

Kubernetes

Descripción del empleo

Axon is seeking a Security Operations Engineer II to join its SOC. You will investigate alerts across Axon's global environment, own incidents end-to-end, and drive automation to scale the SOC.

This role emphasizes building detections and playbooks and collaborating across cloud, identity, and IT systems to improve security posture. You will contribute to on-call duties, develop automation, and deliver measurable improvements in response times and coverage.