Senior Engineer, Information Security

Carvana • Tempe, AZ

3d

About The Position

Carvana is seeking an experienced Senior Engineer, Information Security to join its internal Security Operations Team. The role is a force multiplier for monitoring, detecting, and reporting cyber threats, leading the design and implementation of automated response actions, AI-assisted workflows, and custom integrations. The engineer will promote automation and AI adoption across Technology Services and help ensure the secure architecture of Carvana systems.

The position combines security engineering, software development, incident response, and cross-functional consulting. It includes automating repetitive security work, integrating security tools and enterprise systems, advising projects on security requirements, reviewing exceptions using a risk-based approach, supporting SOC alerts at Tier 3 when needed, and training colleagues. The role participates in an on-call rotation for after-hours and weekend support.

Requirements

• At least 5 years of experience in security engineering or software development.
• Proven experience with SOAR platforms such as Torq, Splunk SOAR/Phantom, Cortex XSOAR, or Swimlane.
• Strong proficiency in scripting and software development languages such as Python for API integration and data processing.
• Experience designing AI-driven automation or integrating AI/LLM capabilities into operational workflows.
• Deep understanding of RESTful APIs and experience integrating security tools such as SIEM, EDR, and firewalls.
• Experience working in a Security Operations Center and understanding of incident response lifecycles.
• Technical proficiency in the MITRE ATT&CK framework and a strong understanding of current attack vectors.
• Proven experience securing a complex, diverse, distributed technology footprint.
• Ability to read, write, speak, and understand English.
• Excellent visual acuity and manual dexterity.

Responsibilities

• Design, build, and maintain automated security playbooks and workflows using Torq or similar SOAR platforms to automate incident response and manual tasks.
• Develop AI-assisted workflows and integrate large language models into security processes to accelerate decision-making and analysis.
• Develop custom scripts and integrations, including Python and REST API solutions, to connect security tools and enterprise systems.
• Partner with cross-functional teams to ensure appropriate logs and data are ingested to support automation logic.
• Promote automation across the broader Technology Services organization and build automation and AI agents for the broader technology organization.
• Identify opportunities to automate repetitive security tasks and free analysts to focus on higher-value threat hunting.
• Apply software development best practices, including version control, testing, and code review, to security operations.
• Work with vendors to resolve security issues, mitigate vulnerabilities, and automate tasks.
• Create and document automation architecture standards, operating procedures, and other standards and procedures.
• Stay current on security news and emerging AI technologies and propose solutions to mitigate potential risks to Carvana.
• Participate in project teams responsible for the secure architecture of Carvana systems.
• Provide security requirements and recommendations for ongoing projects and new system implementations.
• Review systems or applications that do not meet security requirements or policies using a risk-based approach, and write security exceptions when required.
• Resolve security-related tasks from a ticketing queue.
• Occasionally provide Tier 3 support for alerts monitored by the Security Operations Center.
• Train junior members and members of other teams on Information Security.
• Participate in an on-call rotation for after-hours and weekend support.

Benefits

• Medical, dental, and vision benefits.
• 401(k) with company match.
• Student loan payments, vehicle discounts, pet benefits, and other perks.
• Wellness program supporting physical and mental health.
• Access to training and conference opportunities, as well as on-the-job training.
• Company culture of promotions from within, start-up atmosphere, and varied and rapid career development.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed