Security Operations Engineer

We’re explorers, pursuing society’s most critical safety and justice issues with our ecosystem of devices and cloud software. We connect with candor and care, seeking out diverse perspectives from our customers, communities and each other. As a Security Operations Engineer II, you will be an engineer-first member of Axon's Security Operations Center, the team that monitors, investigates, and responds to security events across Axon's corporate, cloud, and regulated SaaS environments, which serve public safety agencies and enterprises around the world. You will respond to alerts, triage incidents, and participate in the on-call rotation, and use what you learn about day-to-day SOC operations to automate the repetitive work that slows response. You will build automation playbooks, tool integrations, and threat detections, and lead incidents from initial findings through root cause analysis and remediation, turning each one into better detections and playbooks. As automation takes over repeat work, more of your time goes to building the capabilities that let the SOC scale with Axon's growth.

Location:
Onsite at our Scottsdale, AZ or Seattle, WA office Reports to: Manager, Information Security Engineering Investigate and respond to security alerts, security tickets, and user-reported phishing as part of the team's shared queue rotation. Participate in the on-call rotation, investigating, containing, and coordinating escalated security events such as exposed credentials, data spillage, suspicious account activity, and cloud account compromise. Write, tune, and document detections against security logs, retire noisy alerts, and write a runbook for every alert you ship. Support identity and access operations, including offboarding, access requests, and access reviews, and automate the checks that keep them reliable. Produce audit and compliance evidence, and automate its collection wherever possible. Design, build, and operate security automation using version control, code review, testing, and CI/CD, including automation playbooks, chat-based workflows, and services that connect security tools. Integrate security, identity, IT service management, and cloud platforms through their APIs, handling authentication and secrets securely. Deploy and maintain the cloud infrastructure behind security tooling using infrastructure-as-code and least-privilege design. Build detections and automation that meet strict data-handling and compliance requirements. Evaluate new security tooling, including automation platforms and AI-assisted triage, for fit, security, and licensing, and take selected tools into production. Partner with senior team members on platform design decisions while assisting more junior team members with scripting and automation. 2+ years of experience in security engineering, SOC or detection engineering, or software or infrastructure roles with a security focus. ~ Strong skills in python, shell scripting, git, and experience shipping and maintaining production code. ~ Hands-on incident response and alert triage experience, and comfort participating in an on-call rotation. ~ Experience with a SIEM, log analytics platform, or SOAR or workflow automation platform. ~ Working knowledge of cloud platforms, identity providers, endpoint detection and response (EDR), and REST APIs and authentication. ~ Experience building and maintaining production CI/CD pipelines. ~ Understanding of the software development lifecycle and application design, with a habit of writing maintainable, tested code. ~ Familiarity with secure development practices such as dependency scanning, secrets scanning, and managing secrets in pipelines. ~ Must be able to pass a standard FBI background check for access to Criminal Justice Information Systems. Medical, Dental, Vision plans Axon is a total compensation company, meaning compensation is made up of base pay, bonus, and stock awards. The actual base pay is dependent upon many factors, such as: level, function, training, transferable skills, work experience, business needs, geographic market, and often a combination of all these factors. Our benefits offer an array of options to help support you physically, financially and emotionally through the big milestones and in your everyday life. Axon is a total compensation company, meaning compensation is made up of base pay, bonus, and stock awards. The actual base pay is dependent upon many factors, such as: level, function, training, transferable skills, work experience, business needs, geographic market, and often a combination of all these factors. Our benefits offer an array of options to help support you physically, financially and emotionally through the big milestones and in your everyday life. We are also committed to building diverse teams that reflect the communities we serve. Studies have shown that women and people of color are less likely t