Senior Information Security Architect (AI & Cloud)

Carvana; Tempe (AZ); Hybrid; USD 140,000 - 190,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401K with company match

Student loan payments

Vehicle discounts

Pet benefits

Wellness program

Training opportunities

Job summary

Carvana is seeking a Senior Engineer, Information Security to join our Security Architecture and Engineering Team in Tempe. You will design security architectures for cloud, data, and network environments, review new products, and guide engineering partners on risk-based decisions.

You will embed security into the engineering lifecycle, drive the security technology roadmap, and maintain critical security tools.

Qualifications

• 5+ years of experience in security engineering, software development or equivalent work experience.
• Proven experience in managing a diverse and wide range of enterprise security technologies.
• Strong proficiency in scripting and software development languages for API integration.
• Experience designing AI-driven automation or integrating AI/LLM capabilities into operational workflows.
• Demonstrated experience in security architecture, including threat modeling, reference architecture design, and architecture reviews across cloud and enterprise environments.
• Working knowledge of AI and LLM security risks and frameworks such as the OWASP Top 10 for LLM Applications and the NIST AI Risk Management Framework.
• Ability to communicate risk and design tradeoffs clearly to both technical teams and business leaders.
• Deep understanding of RESTful APIs and experience integrating various security tools.
• Proven experience in securing a complex, diverse, distributed technology footprint.

Responsibilities

• Design and document security architecture patterns, reference designs, and standards for cloud, application, data, identity, and network environments.
• Perform security architecture reviews of new products, platforms, and vendor solutions, and turn findings into practical, risk-based guidance for engineering and business partners.
• Embed security by design into the engineering lifecycle through guardrails, paved paths, and reusable patterns that make the secure choice the easy choice.
• Contribute to the security technology roadmap and align architecture decisions with business priorities and risk appetite.
• Maintain various security technologies across the enterprise to ensure that the technologies are operational and providing value to the organization.
• Leverage the information from disparate security technologies to improve our security risk posture.
• Engineer solutions that can drive automated response to known security risks, when appropriate.
• Leverage artificial intelligence (AI) to build and optimize our security technologies, including detection, triage, enrichment, and response workflows.
• Design and secure AI and LLM enabled solutions, including agentic workflows, addressing risks such as prompt injection, data leakage, excessive agency, and model supply chain exposure.
• Define security architecture and guardrails for enterprise AI adoption, including access control, data handling, logging, monitoring, and human oversight.
• Partner with engineering, data, legal, and privacy teams to establish practical AI security standards that enable the business to move fast with managed risk.
• Partner with cross-functional stakeholders to drive risk reduction using a risk-based approach.
• Identify and address risks in the organization and partner with teams to close the gaps.
• Evaluate emerging technologies and determine whether new investments are required.
• Identify and implement additional use cases to automate repetitive or operational tasks using our agentic AI solution.

Skills

Security engineering

Threat modeling

REST APIs

AI security

Scripting

Architecture reviews

Cloud security

Cross-functional

Communication

Education

Bachelor's degree

Tools

SIEM

IAM

IDS/IPS

Firewall

DLP

Job description

Carvana is seeking a Senior Engineer, Information Security to join our Security Architecture and Engineering Team in Tempe. You will design security architectures for cloud, data, and network environments, review new products, and guide engineering partners on risk-based decisions.

You will embed security into the engineering lifecycle, drive the security technology roadmap, and maintain critical security tools.