Senior Security Engineer II at Axon

Join Axon and be a Force for Good. At Axon, we’re on a mission to Protect Life. We’re explorers, pursuing society’s most critical safety and justice issues with our ecosystem of devices and cloud software. Like our products, we work better together. We connect with candor and care, seeking out diverse perspectives from our customers, communities and each other. Life at Axon is fast-paced, challenging and meaningful. Here, you’ll take ownership and drive real change. Constantly grow as you work hard for a mission that matters at a company where you matter. Your Impact Axon’s Enterprise Security team is looking for a Senior Security Engineer II focused on building and operating scalable enterprise security controls across cloud, network, endpoints, and core business platforms. This is a hands-on engineering role where you’ll design secure-by-default patterns, implement guardrails, improve firewall and segmentation governance, and automate high-friction security work using infrastructure-as-code and lightweight services. You’ll partner closely with Platform/SRE, IT Infrastructure, and application owners to deliver security improvements that are practical, measurable, and operationally reliable. This is not a Security Operations or Incident Response role. You will be expected to ship production-grade controls and operate them with clear ownership, monitoring, and safe rollout/rollback practices. What You’ll Do Location: This role is based out of our Scottsdale, AZ Office and follows a hybrid schedule. We rely on in-person collaboration and ask that team members work onsite Tuesdays through Fridays, with the flexibility to work remotely on Mondays, unless there is an approved workplace accommodation. We believe that connection fuels innovation, and our in-office culture is designed to foster meaningful teamwork, mentorship, and shared success. Reports to: Senior Manager of Enterprise Security Direct Reports: 0 • Engineer and operate enterprise security controls across cloud, network, endpoints, and enterprise platforms, balancing risk reduction with operational usability. • Build and maintain cloud security guardrails (baseline configurations, policy enforcement, drift detection) and improve visibility through asset inventory, logging coverage, and actionable telemetry. • Improve network security and firewall governance, including segmentation patterns, rule hygiene (review cadence, deprecations, ownership), and safe change management. • Define and ship secure-by-default platform patterns and reference architectures for common service types (microservices, SaaS integrations, admin tooling), including standards for secrets, keys/certificates, and secure connectivity. • Deliver automation and IaC/policy-as-code solutions to enforce controls, reduce toil, and generate auditable evidence (e.g., Terraform and policy/config frameworks). • Establish control reliability and assurance: dashboards and control health metrics, monitoring and alerting, runbooks, and predictable operational ownership for high-blast-radius controls. • Lead technical design and threat modeling for security initiatives; drive remediation of high-impact findings through engineering execution and cross-team alignment. What You Bring • 6+ years in security engineering, platform engineering, systems engineering, or similar roles with meaningful ownership of production systems. • Hands-on engineering ability in one or more languages (Python, Go, TypeScript, etc.) building integrations, automation, or internal services. • Experience shipping and operating changes that have real operational impact, with an emphasis on safety (staged rollout, rollback planning, change governance). • Working knowledge of enterprise security fundamentals: least privilege, secrets handling, logging/auditability, threat modeling, and secure-by-default design. • Experience with infrastructure-as-code (Terraform or equivalent) and configuration/policy-as-code approaches. • Experience implementing cloud security controls (guardrails, posture improvements, policy enforcement, logging standards) in AWS/Azure/GCP. • Experience with enterprise networking/firewalls: segmentation, rule governance, change management, and operational hygiene. • Experience with endpoint security baselines and enterprise platform hardening (SaaS/admin configuration, core enterprise tooling). • Experience building lightweight services/workers for enforcement, detection, ticketing, or control evidence automation. • Familiarity with enterprise ITSM workflows and cross-platform integrations (SaaS tooling, ticketing systems, internal platforms). Benefits that Benefit You • Competitive salary and 401k with employer match • Discretionary paid time off • Paid parental leave for all • Medical, Dental, Vision plans • Fitness Programs • Emotional & Mental Wellness support • Learning & Development programs • Employee Resource Groups (ERGs) • And yes, we have snacks in our offices Benefits listed herein may vary depending on the nature of your employment and the location where you work. Don’t meet every single requirement? That's ok. At Axon, we Aim Far. We think big with a long-term view because we want to reinvent the world to be a safer, better place. We are also committed to building diverse teams that reflect the communities we serve. Studies have shown that women and people of color are less likely to apply to jobs unless they check every box in the job description. If you’re excited about this role and our mission to Protect Life but your experience doesn’t align perfectly with every qualification listed here, we encourage you to apply anyways. You may be just the right candidate for this or other roles. Important Notes The above job description is not intended as, nor should it be construed as, exhaustive of all duties, responsibilities, skills, efforts, or working conditions associated with this job. The job description may change or be supplemented at any time in accordance with business needs and conditions. Some roles may also require legal eligibility to work in a firearms environment. We collect personal information from applicants to evaluate candidates for employment. You may request access, deletion, or exercise other CCPA rights at [Upgrade to PRO to see contact] or via our Axon Privacy Web Form. For more information, please see the Your California Privacy Rights section of our Applicant and Candidate Privacy Notice. Axon’s mission is to Protect Life and is committed to the well-being and safety of its employees as well as Axon’s impact on the environment. All Axon employees must be aware of and committed to the appropriate environmental, health, and safety regulations, policies, and procedures. Axon employees are empowered to report safety concerns as they arise and activities potentially impacting the environment. We are an equal opportunity employer that promotes justice, advances equity, values diversity and fosters inclusion. We’re committed to hiring the best talent — regardless of race, creed, color, ancestry, religion, sex (including pregnancy), national origin, sexual orientation, age, citizenship status, marital status, disability, gender identity, genetic information, veteran status, or any other characteristic protected by applicable laws, regulations and ordinances — and empowering all of our employees so they can do their best work. If you have a disability or special need that requires assistance or accommodation during the application or the recruiting process, please email [Upgrade to PRO to see contact]. Please note that this email address is for accommodation purposes only. Axon will not respond to inquiries for other purposes. Phishing alert: Axon will never ask you to pay for any part of the hiring process, including training, equipment, or background checks. We do not make job offers via text message, WhatsApp, or instant messaging platforms without a formal interview process. All legitimate job openings are listed on our official careers page at [Upgrade to PRO to see link] If you receive a suspicious offer or outreach from an email address that is not @axon.com, or if you are asked for sensitive personal information (bank details, Social Security Number) prematurely, please ignore the message and report it to [Upgrade to PRO to see contact].