Operations Specialist, Information Security
About The Position
Carvana is seeking an early-career Operations Specialist to join its Information Security Team. The role supports the deployment, maintenance, and management of security technologies across the organization to identify, protect against, detect, respond to, and recover from cyber risks, threats, and exposures. The specialist will help integrate and manage enterprise security technologies, reduce risk, and improve the organization’s security posture in a modern cloud environment. The position includes structured mentorship from experienced engineers and opportunities to contribute from day one.
Requirements
- At least 1 year of experience in information security, Information Technology, or a closely related field; internships, academic projects, and home labs count.
- Basic familiarity with cloud environments such as AWS, Azure, GCP, or OCI, and eagerness to learn cloud-specific threats and defenses.
- Foundational understanding of common attack techniques and defensive concepts.
- Exposure to scripting or automation in Python, Bash, or PowerShell, and curiosity about using AI coding assistants to build tooling.
- Strong analytical thinking and ability to break down problems, form hypotheses, and test solutions.
- Clear written and verbal communication skills, including ability to explain technical concepts to non-technical stakeholders.
- Self-motivation and bias toward action.
- Curiosity-driven approach to learning about security, such as following security blogs, researching CVEs, or trying capture-the-flag challenges.
- Must be able to read, write, speak, and understand English.
- Requires excellent visual acuity and manual dexterity.
Nice To Haves
- An entry-level security certification such as CompTIA Security+, Google Cybersecurity Certificate, or equivalent coursework or degree.
- Hands-on experience managing or configuring a security tool such as a SIEM, EDR, or vulnerability scanner.
- Participation in CTF competitions, bug bounty programs, or security research.
Responsibilities
- Support day-to-day operations of the security tool stack and help ensure tools are healthy and producing actionable signals.
- Correlate and analyze data across security platforms to identify trends, gaps, and opportunities to reduce risk.
- Assist with triaging vulnerability and bug bounty findings and coordinate with engineering and product teams to track remediation.
- Contribute to automation projects that reduce repetitive manual tasks, including building and refining workflows in the agentic AI security platform.
- Research and document capabilities of prospective security technologies and participate in proof-of-value testing.
- Communicate risk to cross-functional stakeholders and help prioritize remediation using a risk-based approach.
- Explore applications of AI to optimize security capabilities and surface insights faster.
- Learn from senior engineers through mentorship, code reviews, and collaborative incident response exercises.
- Perform other duties as assigned.
Benefits
- Medical, dental, and vision benefits.
- 401(k) with company match.
- Student loan payments, vehicle discounts, pet benefits, and other perks.
- Wellness program supporting physical and mental health.
- Access to training and conference opportunities and on-the-job training.
- Opportunities for promotion from within and varied, rapid career development.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Entry Level
Education Level
No Education Listed
