Engineer, Information Security

About Carvana

At Carvana, we’re changing the way people buy and sell cars. With an ambitious vision and a fundamentally different approach designed to be fun, fast, and fair, Carvana became the fastest-growing automotive retailer in history. We expanded nationally, went public on the New York Stock Exchange, sold our 1 millionth car, and reached the Fortune 500, all in just eight years.

Today, with 4 million retail customers and counting, Carvana is both the fastest-growing and the most profitable public automotive retailer, and we’re just getting started. We continue to raise the bar for our customers as we tackle the enormous opportunity still ahead in the largest consumer vertical.

Working here means being part of a team that embraces change, celebrates creative problem solving, and always strives to be better. At Carvana, you’ll have the opportunity to take on meaningful challenges, learn quickly, and help shape the future of automotive retail. If you’re driven to grow and make an impact as part of a collaborative team, you’ll fit right in. Learn more about what it’s like to work here from the people that already do. 

Work Model: This is a 100% on-site role at our Tempe office, Monday through Friday.

About the team and position

We are looking for a Senior Engineer, Information Security to join our Security Architecture and Engineering Team that will manage our various security technologies that are used to operate our holistic information security program. You will be responsible for evaluating, managing and maintaining our security technologies. 

What you’ll be doing

• Design and document security architecture patterns, reference designs, and standards for cloud, application, data, identity, and network environments.
• Perform security architecture reviews of new products, platforms, and vendor solutions, and turn findings into practical, risk-based guidance for engineering and business partners.
• Embed security by design into the engineering lifecycle through guardrails, paved paths, and reusable patterns that make the secure choice the easy choice.
• Contribute to the security technology roadmap and align architecture decisions with business priorities and risk appetite.
• Maintain various security technologies across the enterprise to ensure that the technologies are operational and providing value to the organization.
• Leverage the information from disparate security technologies to improve our security risk posture.
• Engineer solutions that can drive automated response to known security risks, when appropriate.
• Leverage artificial intelligence (AI) to build and optimize our security technologies, including detection, triage, enrichment, and response workflows.