Senior Engineer, Information Security

What you'll be doing

• Design, build, and maintain automated security playbooks and workflows using Torq or similar SOAR platforms to automate incident response and manual tasks.
• Develop AI-assisted workflows and integrate Large Language Models (LLMs) into security processes to accelerate decision-making and analysis.
• Develop custom scripts and integrations (using Python, REST APIs, etc.) to bridge gaps between disparate security tools and enterprise systems.
• Partner with cross-functional teams to ensure appropriate logs and data are ingested effectively to support automation logic.
• Evangelize automation across the broader Technology Services organization.
• Build and implement automation and AI agents to support the broader technology organization.
• Identify opportunities to automate manual, repetitive security tasks to free up analyst time for higher-value threat hunting.
• Apply software development best practices (version control, testing, code review) to security operations.
• Work with vendors to develop technical solutions to mitigate security vulnerabilities and automate tasks.
• Create and/or document standards and operating procedures for automation architecture.
• Stay abreast of security news and emerging AI technologies to offer innovative automation solutions that mitigate potential risks.
• Be an integral member of projects teams that is responsible for the secure architecture of Carvana systems.
• Consult and provide security requirements and recommendations for ongoing projects and new system implementations.
• Take a risk based approach at reviewing systems or applications that do not meet security requirements or security policies and writing security exceptions when required.
• Resolve security related tasks from a ticketing queue.
• Occasionally serve as Tier 3 support for alerts that are monitored by the Security Operations Center.
• Work with vendors to bring solutions to resolve current security issues and/or develop technical solutions to mitigate security vulnerabilities and automate tasks.
• Create and/or document standards and operating procedures.
• Train junior members and members of other teams on Information Security.
• Stay abreast of security news that could have an impact on the security of Carvana and offer solutions to mitigate potential risks.
• This role involves being on an on-call rotation for after hours and weekend support.

What you should have

• 5+ years of experience in security engineering or software development.
• Proven experience with SOAR platforms (e.g., Torq, Splunk SOAR/Phantom, Cortex XSOAR, Swimlane).
• Strong proficiency in scripting and software development languages (e.g., Python) for API integration and data processing.
• Experience designing AI-driven automation or integrating AI/LLM capabilities into operational workflows.
• Deep understanding of RESTful APIs and experience integrating various security tools (SIEM, EDR, Firewalls, etc.).
• Experience working in a Security Operations Center (SOC) and understanding Incident Response lifecycles.
• Technical proficiency in MITRE ATT&CK framework and strong understanding of current attack vectors.
• Proven experience in securing a complex, diverse, distributed technology footprint.

What we'll offer in return

• Full-Time Salary Position with a competitive salary.
• Medical, Dental, and Vision benefits.
• 401K with company match.
• A multitude of perks including student loan payments, discounts on vehicles, benefits for your pets, and much more.
• A great wellness program to keep you healthy and happy both physically and mentally.
• Access to training and conference opportunities as well as great on-the-job training.
• A company culture of promotions from within, with a start-up atmosphere allowing for varied and rapid career development.
• A seat in one of the fastest-growing companies in the country.

Other requirements

To be able to do your job at Carvana, there are some basic requirements we want to share with you.

• Must be able to read, write, speak, and understand English.
• Requires excellent visual acuity and manual dexterity.

• Legal stuff
• Hiring is contingent on passing a complete background check. This role is not eligible for visa sponsorship.

Please note this job description is not designed to contain a comprehensive listing of activities, duties, or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice.