Senior Engineer, Information Security

About Carvana

At Carvana, we're changing the way people buy and sell cars. With an ambitious vision and a fundamentally different approach designed to be fun, fast, and fair, Carvana became the fastest-growing automotive retailer in history. We expanded nationally, went public on the New York Stock Exchange, sold our 1 millionth car, and reached the Fortune 500, all in just eight years.

Today, with 4 million retail customers and counting, Carvana is both the fastest-growing and the most profitable public automotive retailer, and we're just getting started. We continue to raise the bar for our customers as we tackle the enormous opportunity still ahead in the largest consumer vertical.

Working here means being part of a team that embraces change, celebrates creative problem solving, and always strives to be better. At Carvana, you'll have the opportunity to take on meaningful challenges, learn quickly, and help shape the future of automotive retail. If you're driven to grow and make an impact as part of a collaborative team, you'll fit right in. Learn more about what it's like to work here from the people that already do. 

About the team and position

We're looking for an experienced Senior Engineer, Information Security to join our internal Security Operations Team. While this team is responsible for monitoring, detecting, and reporting cyber threats, your role will be a force multiplier.

You will lead the design and implementation of automated response actions, build next-generation AI-assisted workflows, and develop custom integrations  You will evangelize automation and the adoption of AI across the broader Technology Services organization.

What you'll be doing

• Design, build, and maintain automated security playbooks and workflows using Torq or similar SOAR platforms to automate incident response and manual tasks.
• Develop AI-assisted workflows and integrate Large Language Models (LLMs) into security processes to accelerate decision-making and analysis.
• Develop custom scripts and integrations (using Python, REST APIs, etc.) to bridge gaps between disparate security tools and enterprise systems.
• Partner with cross-functional teams to ensure appropriate logs and data are ingested effectively to support automation logic.
• Evangelize automation across the broader Technology Services organization.
• Build and implement automation and AI agents to support the broader technology organization. 
• Identify opportunities to automate manual, repetitive security tasks to free up analyst time for higher-value threat hunting.
• Apply software development best practices (version control, testing, code review) to security operations.
• Work with vendors to develop technical solutions to mitigate security vulnerabilities and automate tasks.
• Create and/or document standards and operating procedures for automation architecture.
• Stay abreast of security news and emerging AI technologies to offer innovative automation solutions that mitigate potential risks.
• Be an integral member of projects teams that is responsible for the secure architecture of Carvana systems. 
• Consult and provide security requirements and recommendations for ongoing projects and new system implementations. 
• Take a risk based approach at reviewing systems or applications that do not meet security requirements or security policies and writing security exceptions when required. 
• Resolve security related tasks from a ticketing queue.
• Occasionally serve as Tier 3 support for alerts that are monitored by the Security Operations Center.
• Work with vendors to bring solutions to resolve current security issues and/or develop technical solutions to mitigate security vulnerabilities and automate tasks.
• Create and/or document standards and operating procedures. 
• Train junior members and members of other teams on Information Security.
• Stay abreast of security news that could have an impact on the security of Carvana and offer solutions to mitigate potential risks. 
• This role involves being on an on-call rotation for after hours and weekend support. 

What you should have

• 5+ years of experience in security engineering or software development.
• Proven experience with SOAR platforms (e.g., Torq, Splunk SOAR/Phantom, Cortex XSOAR, Swimlane).
• Strong proficiency in scripting and software development languages (e.g., Python) for API integration and data processing.
• Experience designing AI-driven automation or integrating AI/LLM capabilities into operational workflows.
• Deep understanding of RESTful APIs and experience integrating various security tools (SIEM, EDR, Firewalls, etc.).
• Experience working in a Security Operations Center (SOC) and understanding Incident Response lifecycles.
• Technical proficiency in MITRE ATT&CK framework and strong understanding of current attack vectors.
• Proven experience in securing a complex, diverse, distributed technology footprint.

What we'll offer in return

• Full-Time Salary Position with a competitive salary.
• Medical, Dental, and Vision benefits.
• 401K with company match.
• A multitude of perks including student loan payments, discounts on vehicles, benefits for your pets, and much more.
• A great wellness program to keep you healthy and happy both physically and mentally.
• Access to training and conference opportunities as well as great on-the-job training.
• A company culture of promotions from within, with a start-up atmosphere allowing for varied and rapid career development.
• A seat in one of the fastest-growing companies in the country.

Other requirements

To be able to do your job at Carvana, there are some basic requirements we want to share with you.

• Must be able to read, write, speak, and understand English.
• Requires excellent visual acuity and manual dexterity.

Of course, we'll make any reasonable accommodations for those with disabilities to perform the essential functions of their jobs. 

Legal stuff

Hiring is contingent on passing a complete background check.  This role is not eligible for visa sponsorship.

Carvana is an equal employment opportunity employer.  All applicants receive consideration for employment without regard to race, color, religion, gender, sexual orientation, gender identity or expression, marital status, national origin, age, mental or physical disability, protected veteran status, or genetic information, or any other basis protected by applicable law.  Carvana also prohibits harassment of applicants or employees based on any of these protected categories.

Please note this job description is not designed to contain a comprehensive listing of activities, duties, or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice.