About Carvana

If you like disrupting the norm and are looking for a company revolutionizing an industry then you will LOVE what Carvana has done for the car buying experience. Buying a car the old fashioned way sucks and we are working hard to make it NOT suck. At Carvana, our customers can hop online to...

Search and browse our inventory of over 20,000 vehicles that we own and certify.
Narrow down search results using highly intelligent filtering tools/components.
View vehicle details, Carfax reports, and 360 rotating studio images for every vehicle.
Secure financing in minutes using Carvana’s in-house service or their own bank.
Interact with GUI components to easily customize loan length, down payment, and monthly payment.
Generate, upload, and eSign all documents online (no ink necessary).
Schedule front door delivery or pick up at one of our vending machines.
Trade-in their existing vehicle or just sell it to Carvana (no purchase necessary).

For more information on Carvana and our mission, learn more about what it’s like to work here from the people that already do.

This is a 100% on-site position, Monday through Friday, at our corporate HQ in Tempe, Arizona.

About the team and position

We are hiring an Associate Engineer, Information Security to join our Information Security Team. In this role, you will play a pivotal role in safeguarding our digital infrastructure by deploying, maintaining and managing various security technologies deployed within the organization to identify, protect, detect, respond and recover from cyber risks, threats, and exposures. A successful candidate will be able to effectively integrate and manage multiple enterprise security technologies across our technology stack, drive significant risk reduction and enhance our overall security risk posture.

What you’ll be doing

Maintain various security technologies across the enterprise to ensure that the technologies are operational and providing value to the organization.
Leverage the information from disparate security technologies to improve our security risk posture.
Engineer solutions that can drive automated response to known security risks, when appropriate.
Leverage artificial intelligence (AI) to build and optimize our security technologies, when appropriate.
Partner with cross-functional stakeholders to drive risk reduction using a risk-based approach.
Assist in triaging vulnerabilities and bug bounty findings and drive remediation efforts with appropriate cross-functional stakeholders to ensure timely remediation.
Identify and implement additional use cases to automate repetitive and/or operational tasks to our agentic AI solution.
Participate in the assessment of new security technologies and provide insight into the potential impact on our security program.

What you should have

2+ years of experience in information security, information technology, or related field.
Familiarity with securing cloud environments and understanding cloud specific threats and mitigation strategies.
Understanding of current attack vectors and mitigation approaches.
Exceptional analytical and problem solving skills.
Strong technical acumen, communication, and influence skills.
Self-starter with minimal guidance and supervision.
A curiosity-driven mindset eager to learn, grow and develop.

It would be great if you also had

Information Security Certification (e.g. Security+, etc.) and/or education.
Hands-on experience in managing security technologies.
Practical experience in automation through scripting languages and/or via AI coding agents.

What we’ll offer in return

Full-Time Salary Position with a competitive salary.
Medical, Dental, and Vision benefits.
401K with company match.
A multitude of perks including student loan payments, discounts on vehicles, benefits for your pets, and much more.
A great wellness program to keep you healthy and happy both physically and mentally.
Access to training and conference opportunities as well as great on-the-job training.
A company culture of promotions from within, with a start-up atmosphere allowing for varied and rapid career development.

Other requirements

To be able to do your job at Carvana, there are some basic requirements we want to share with you.

Must be able to read, write, speak, and understand English.
Requires excellent visual acuity and manual dexterity.

Of course, we’ll make any reasonable accommodations for those with disabilities to perform the essential functions of their jobs.

Legal Stuff

Hiring is contingent on passing a complete background check. This role is not eligible for visa sponsorship.

Carvana is an equal employment opportunity employer. All applicants receive consideration for employment without regard to race, color, religion, gender, sexual orientation, gender identity or expression, marital status, national origin, age, mental or physical disability, protected veteran status, or genetic information, or any other basis protected by applicable law. Carvana also prohibits harassment of applicants or employees based on any of these protected categories.

Please note this job description is not designed to contain a comprehensive listing of activities, duties, or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice.