SOC Automation Engineer II

Join Our Talent Community; Scottsdale (AZ); On-site; USD 96,000 - 154,000; Full time

Benefits offered by this job

Competitive salary

401k with employer match

Discretionary paid time off

Parental leave

Medical, Dental, Vision plans

Fitness Programs

Mental Wellness support

Learning & Development programmes

ERGs

Snacks in our offices

Job summary

Axon in Scottsdale, AZ is seeking a Security Operations Engineer II to join the Security Operations Center, monitoring, investigating, and responding to security events across corporate, cloud, and regulated SaaS environments worldwide. You will design automation, write detections, and lead incidents from discovery to remediation while expanding playbooks and ensuring scalable SOC operations as Axon grows.

Two years of security engineering or related experience are required; FBI background check

Qualifications

• 2+ years of experience in security engineering, SOC or detection engineering, or software or infrastructure roles with a security focus.
• Strong skills in python, shell scripting, git, and experience shipping and maintaining production code.
• Hands-on incident response and alert triage experience, and comfort participating in an on-call rotation.
• Experience with a SIEM, log analytics platform, or SOAR or workflow automation platform.
• Working knowledge of cloud platforms, identity providers, endpoint detection and response (EDR), and REST APIs and authentication.
• Experience with infrastructure-as-code tools.
• Experience with Git-based collaborative development, including branching, pull requests, and code review.
• Experience building and maintaining production CI/CD pipelines.
• Understanding of the software development lifecycle and application design, with a habit of writing maintainable, tested code.
• Familiarity with secure development practices such as dependency scanning, secrets scanning, and managing secrets in pipelines.
• Clear written communication for runbooks, incident timelines, and audit evidence.
• Must be able to pass a standard FBI background check for access to Criminal Justice Information Systems.

Responsibilities

• Investigate and respond to security alerts, security tickets, and user-reported phishing as part of the team’s shared queue rotation.
• Participate in the on-call rotation, investigating, containing, and coordinating escalated security events such as exposed credentials, data spillage, suspicious account activity, and cloud account compromise.
• Own incidents through to closure: timeline, root cause, remediation tracking, and a detection or playbook update so the same issue is caught faster next time.
• Identify repetitive, manual work and replace it with automation, such as phishing triage and enrichment, offboarding verification, vulnerability remediation tracking, and bulk ticket handling.
• Write, tune, and document detections against security logs, retire noisy alerts, and write a runbook for every alert you ship.
• Support identity and access operations, including offboarding, access requests, and access reviews, and automate the checks that keep them reliable.
• Produce audit and compliance evidence, and automate its collection wherever possible.

Skills

Python

Shell scripting

Git

Incident response

SIEM

SOAR

REST APIs

IaC

Tools

CI/CD pipelines

Infrastructure as Code

Runbooks

Job description

Axon in Scottsdale, AZ is seeking a Security Operations Engineer II to join the Security Operations Center, monitoring, investigating, and responding to security events across corporate, cloud, and regulated SaaS environments worldwide. You will design automation, write detections, and lead incidents from discovery to remediation while expanding playbooks and ensuring scalable SOC operations as Axon grows.

Two years of security engineering or related experience are required; FBI background check