Operations Specialist, Information Security

What you'll be doing

• Support the day-to-day operations of our security tool stack - learning how each technology works, why it matters, and how to keep it healthy and producing actionable signals.
• Help correlate and analyze data across multiple security platforms to identify trends, gaps, and opportunities to reduce risk using a pragmatic, risk-based approach.
• Assist in triaging vulnerability and bug bounty findings, collaborating with engineering and product teams to track and drive timely remediation.
• Contribute to automation projects that eliminate repetitive manual tasks, including building and refining workflows in our agentic AI security platform.
• Support the evaluation of new security technologies by researching capabilities, documenting findings, and participating in proof-of-value testing.
• Partner with cross-functional stakeholders to communicate risk clearly and help prioritize remediation using a risk-based approach.
• Explore how AI can be applied to optimize existing security capabilities and surface insights faster and bring ideas to the team.
• Learn from senior engineers through structured mentorship, code reviews, and collaborative incident response exercises.
• Other duties as assigned.

What you should have

• At least 1 year of experience in information security, Information Technology, or a closely related field - internships, academic projects, and home labs all count.
• Basic familiarity with cloud environments (AWS, Azure, GCP, OCI) and an eagerness to learn cloud-specific threats and defenses.
• A foundational understanding of common attack techniques and the concepts behind defending against them.
• Exposure to scripting or automation in Python, Bash, or PowerShell, and curiosity about using AI coding assistants to build tooling.
• Strong analytical thinking - you enjoy breaking down a problem, forming a hypothesis, and testing the solution.
• Clear written and verbal communication skills; you can explain a technical concept to a non-technical stakeholder.
• Self-motivated with a bias toward action - you don't wait to be told what to do next.
• A genuine curiosity-driven mindset: you read security blogs, chase CVEs for fun, or tinker with capture-the-flag challenges.

Optional Requirements

• An entry-level security certification such as CompTIA Security+, Google Cybersecurity Certificate, or equivalent coursework or degree.
• Hands-on experience managing or configuring a security tool (SIEM, EDR, vulnerability scanner, etc.).
• Participation in CTF competitions, bug bounty programs, or security research of any kind.

What we'll offer in return

• Full-Time Salary Position with a competitive salary.
• Medical, Dental, and Vision benefits.
• 401K with company match.
• A multitude of perks including student loan payments, discounts on vehicles, benefits for your pets, and much more.
• A great wellness program to keep you healthy and happy both physically and mentally.
• Access to training and conference opportunities as well as great on-the-job training.
• A company culture of promotions from within, with a start-up atmosphere allowing for varied and rapid career development.
• A seat in one of the fastest-growing companies in the country.

Other requirements

To be able to do your job at Carvana, there are some basic requirements we want to share with you.

• Must be able to read, write, speak, and understand English.
• Requires excellent visual acuity and manual dexterity.

• Legal stuff
• Hiring is contingent on passing a complete background check. This role is not eligible for visa sponsorship.

Please note this job description is not designed to contain a comprehensive listing of activities, duties, or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice.