Senior Engineer, Information Security

Carvana • Tempe, AZ

2d • Onsite

About The Position

We are looking for a Senior Engineer, Information Security to join our Security Architecture and Engineering Team that will manage our various security technologies that are used to operate our holistic information security program. You will be responsible for evaluating, managing and maintaining our security technologies.

Requirements

• 5+ years of experience in security engineering, software development or equivalent work experience.
• Proven experience in managing a diverse and wide range of enterprise security technologies.
• Strong proficiency in scripting and software development languages for API integration.
• Experience designing AI-driven automation or integrating AI/LLM capabilities into operational workflows.
• Demonstrated experience in security architecture, including threat modeling, reference architecture design, and architecture reviews across cloud and enterprise environments.
• Working knowledge of AI and LLM security risks and frameworks such as the OWASP Top 10 for LLM Applications and the NIST AI Risk Management Framework.
• Ability to communicate risk and design tradeoffs clearly to both technical teams and business leaders.
• Deep understanding of RESTful APIs and experience integrating various security tools.
• Proven experience in securing a complex, diverse, distributed technology footprint.
• Must be able to read, write, speak, and understand English.

Nice To Haves

• Experience in working in a highly matrixed organization.
• Industry specific certification.

Responsibilities

• Design and document security architecture patterns, reference designs, and standards for cloud, application, data, identity, and network environments.
• Perform security architecture reviews of new products, platforms, and vendor solutions, and turn findings into practical, risk-based guidance for engineering and business partners.
• Embed security by design into the engineering lifecycle through guardrails, paved paths, and reusable patterns that make the secure choice the easy choice.
• Contribute to the security technology roadmap and align architecture decisions with business priorities and risk appetite.
• Maintain various security technologies across the enterprise to ensure that the technologies are operational and providing value to the organization.
• Leverage the information from disparate security technologies to improve our security risk posture.
• Engineer solutions that can drive automated response to known security risks, when appropriate.
• Leverage artificial intelligence (AI) to build and optimize our security technologies, including detection, triage, enrichment, and response workflows.
• Design and secure AI and LLM enabled solutions, including agentic workflows, addressing risks such as prompt injection, data leakage, excessive agency, and model supply chain exposure.
• Define security architecture and guardrails for enterprise AI adoption, including access control, data handling, logging, monitoring, and human oversight.
• Partner with engineering, data, legal, and privacy teams to establish practical AI security standards that enable the business to move fast with managed risk.
• Partner with cross-functional stakeholders to drive risk reduction using a risk-based approach.
• Identify and address risks in the organization and partner with teams to close the gaps.
• Evaluate emerging technologies and determine whether new investments are required.
• Identify and implement additional use cases to automate repetitive or operational tasks using our agentic AI solution.

Benefits

• Full-Time Salary Position with a competitive salary.
• Medical, Dental, and Vision benefits.
• 401K with company match.
• A multitude of perks including student loan payments, discounts on vehicles, benefits for your pets, and much more.
• A great wellness program to keep you healthy and happy both physically and mentally.
• Access to training and conference opportunities as well as great on-the-job training.
• A company culture of promotions from within, with a start-up atmosphere allowing for varied and rapid career development.
• A seat in one of the fastest-growing companies in the country.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed