Operations Specialist, Information Security

About the team and position We are looking for an Operations Specialist, Information Security to join our Information Security Team. In this role, you will play a pivotal role in safeguarding our digital infrastructure by deploying, maintaining and managing various security technologies to identify, protect, detect, respond and recover from cyber risks, threats, and exposures. A successful candidate will be able to effectively integrate and manage multiple enterprise security technologies across our technology stack, drive significant risk reduction and enhance our overall security risk posture. This role is built for someone early in their career who is curious, hungry to learn, and excited to get their hands on real security tooling across a modern cloud environment. You'll be mentored by experienced engineers while contributing real work from day one. What you’ll be doing Support the day‑to‑day operations of our security tool stack - learning how each technology works, why it matters, and how to keep it healthy and producing actionable signals. Help correlate and analyze data across multiple security platforms to identify trends, gaps, and opportunities to reduce risk using a pragmatic, risk‑based approach. Assist in triaging vulnerability and bug bounty findings, collaborating with engineering and product teams to track and drive timely remediation. Contribute to automation projects that eliminate repetitive manual tasks, including building and refining workflows in our agentic AI security platform. Support the evaluation of new security technologies by researching capabilities, documenting findings, and participating in proof‑of‑value testing. Partner with cross‑functional stakeholders to communicate risk clearly and help prioritize remediation using a risk‑based approach. Explore how AI can be applied to optimize existing security capabilities and surface insights faster and bring ideas to the team. Learn from senior engineers through structured mentorship, code reviews, and collaborative incident response exercises. Other duties as assigned. What you should have At least 1 year of experience in information security, information technology, or a closely related field – internships, academic projects, and home labs all count. Basic familiarity with cloud environments (AWS, Azure, GCP, OCI) and an eagerness to learn cloud‑specific threats and defenses. A foundational understanding of common attack techniques and the concepts behind defending against them. Exposure to scripting or automation in Python, Bash, or PowerShell, and curiosity about using AI coding assistants to build tooling. Strong analytical thinking – you enjoy breaking down a problem, forming a hypothesis, and testing the solution. Clear written and verbal communication skills; you can explain a technical concept to a non‑technical stakeholder. Self‑motivated with a bias toward action – you don't wait to be told what to do next. A genuine curiosity‑driven mindset: you read security blogs, chase CVEs for fun, or tinker with capture‑the‑flag challenges. Optional Requirements An entry‑level security certification such as CompTIA Security+, Google Cybersecurity Certificate, or equivalent coursework or degree. Hands‑on experience managing or configuring a security tool (SIEM, EDR, vulnerability scanner, etc.). Participation in CTF competitions, bug bounty programs, or security research of any kind. What we’ll offer in return Full‑time salary position with a competitive salary. Medical, dental and vision benefits. 401(k) with company match. Perks including student loan payments, discounts on vehicles, pet benefits, and more. Wellness program to keep you healthy and happy physically and mentally. Training and conference opportunities, and great on‑the‑job training. A culture of promotions from within with a startup atmosphere allowing rapid career development. A seat in one of the fastest‑growing companies in the country. Other requirements Must be able to read, write, speak, and understand English. Requires excellent visual acuity and manual dexterity. Legal stuff Hiring is contingent on passing a complete background check. This role is not eligible for visa sponsorship. Carvana is an equal employment opportunity employer. All applicants receive consideration for employment without regard to race, color, religion, gender, sexual orientation, gender identity or expression, marital status, national origin, age, mental or physical disability, protected veteran status, or genetic information, or any other basis protected by applicable law. Carvana also prohibits harassment of applicants or employees based on any of these protected categories. Please note this job description is not designed to contain a comprehensive listing of activities, duties, or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice. #J-18808-Ljbffr Carvana