Security Operations Engineer II - Automation & Incident Response

Axon Enterprise; Scottsdale (AZ, WA); On-site; USD 96,000 - 154,000; Full time

Benefits offered by this job

Competitive salary + 401k match

Discretionary paid time off

Parental leave

Fitness programs

Mental wellness support

Employee resource groups

Snacks in offices

Job summary

Axon Enterprise is seeking a Security Operations Engineer II to join the SOC, monitoring, investigating, and responding to security events across Axon’s environments. You will build automation, playbooks, and detections, and own incidents from initial findings through remediation.

The role emphasizes scalable security tooling and measurable impact on response times. Location is onsite at Scottsdale, AZ or Seattle, WA, reporting to the Manager, Information Security Engineering.

Qualifications

• 2+ years of experience in security engineering, SOC or detection engineering, or software or infrastructure roles with a security focus.
• Strong skills in python, shell scripting, git, and experience shipping and maintaining production code.
• Hands-on incident response and alert triage experience, and comfort participating in an on-call rotation.
• Experience with a SIEM, log analytics platform, or SOAR or workflow automation platform.

Responsibilities

• Investigate and respond to security alerts, security tickets, and user-reported phishing as part of the team's shared queue rotation.
• Participate in the on-call rotation, investigating, containing, and coordinating escalated security events such as exposed credentials, data spillage, suspicious account activity, and cloud account compromise.
• Own incidents through to closure: timeline, root cause, remediation tracking, and a detection or playbook update so the same issue is caught faster next time.
• Identify repetitive, manual work and replace it with automation, such as phishing triage and enrichment, offboarding verification, vulnerability remediation tracking, and bulk ticket handling.
• Write, tune, and document detections against security logs, retire noisy alerts, and write a runbook for every alert you ship.
• Support identity and access operations, including offboarding, access requests, and access reviews, and automate the checks that keep them reliable.
• Produce audit and compliance evidence, and automate its collection wherever possible.

Skills

Python

Shell scripting

Git

Incident response

SIEM/SOAR

Cloud platforms

Infrastructure as Code

CI/CD pipelines

Runbooks

Security automation

Tools

CI/CD tooling

Automation platforms

Job description

Axon Enterprise is seeking a Security Operations Engineer II to join the SOC, monitoring, investigating, and responding to security events across Axon’s environments. You will build automation, playbooks, and detections, and own incidents from initial findings through remediation.

The role emphasizes scalable security tooling and measurable impact on response times. Location is onsite at Scottsdale, AZ or Seattle, WA, reporting to the Manager, Information Security Engineering.