SOC Automation Engineer II

Cyber Security Jobs; Scottsdale (AZ); On-site; USD 96,000 - 154,000; Full time

Benefits offered by this job

Competitive salary

401k with employer match

Discretionary paid time off

Parental leave

Medical, Dental, Vision plans

Wellness programs

Learning & Development

ERGs

Snacks in offices

Job summary

Axon is seeking a Security Operations Engineer II to join the SOC, monitoring, investigating, and responding to security events across Axon's environments. You will build automation, detections, and playbooks, expanding capabilities as the SOC scales, with onsite work in Scottsdale or Seattle and a focus on fast, precise incident handling.

You will own incidents end-to-end, contribute to automation initiatives, and collaborate with senior teammates on platform design while mentoring juniors.

Qualifications

• 2+ years in security engineering, SOC or detection roles.
• Strong Python, shell scripting, and Git skills.
• Hands-on incident response and on-call experience.
• Experience with a SIEM, log analytics platform, or SOAR or workflow automation platform.
• Working knowledge of cloud platforms, identity providers, EDR, REST APIs and authentication.
• Experience with infrastructure-as-code tools.
• Git-based collaborative development, including branching, PRs, and code review.
• Experience building and maintaining production CI/CD pipelines.
• Understanding of SDLC and secure development practices.

Responsibilities

• Investigate and respond to security alerts, tickets, and user-reported phishing as part of the queue rotation.
• Participate in on-call rotation, containing and coordinating escalated security events.
• Own incidents from timeline to remediation and updating detections/playbooks.
• Identify repetitive manual work and replace with automation and playbooks.
• Write, tune, and document detections and runbooks for alerts.
• Support identity and access operations and automate checks.
• Produce audit and compliance evidence and automate collection.

Skills

Python

Shell scripting

Git

Incident response

SIEM/SOAR

Cloud platforms

Infrastructure as code

CI/CD pipelines

Runbooks

Security automation

Job description

Axon is seeking a Security Operations Engineer II to join the SOC, monitoring, investigating, and responding to security events across Axon's environments. You will build automation, detections, and playbooks, expanding capabilities as the SOC scales, with onsite work in Scottsdale or Seattle and a focus on fast, precise incident handling.

You will own incidents end-to-end, contribute to automation initiatives, and collaborate with senior teammates on platform design while mentoring juniors.