below marketmost similar roles pay hereabove market
This listing doesn't post a salary. Most similar roles pay
$151,475–$215,784.
Based on 240 similar postings.
Employer
About Carvana
Carvana is an e-commerce platform for buying and selling used cars, offering customers a fully online purchasing experience with home delivery, financing, and vehicle trade-ins through its network of automated car vending machines and inspection centers.
The Senior Engineer, Information Security joins the Security Architecture and Engineering Team to manage and maintain various security technologies across the enterprise. This role involves designing and documenting security architecture patterns for cloud, application, data, identity, and network environments. Key responsibilities include performing security architecture reviews, embedding security by design into the engineering lifecycle, and developing automated responses to known risks. The position specifically focuses on securing AI and LLM enabled solutions, addressing risks like prompt injection and data leakage. Candidates must possess experience in security engineering, software development, and scripting for API integration. Required skills include threat modeling, managing diverse security technologies, and knowledge of the OWASP Top 10 for LLM Applications and the NIST AI Risk Management Framework to secure a complex, distributed technology footprint.
What does a Engineer earn?
Median $178175 from 251 postings across 54 companies.
Design and document security architecture patterns and standards for cloud, application, data, identity, and network environments.
Perform security architecture reviews of new products and vendor solutions to provide risk-based guidance.
Embed security by design into the engineering lifecycle using guardrails and reusable patterns.
Maintain and manage enterprise security technologies to ensure they are operational and provide organizational value.
Engineer automated response solutions and leverage AI to optimize detection, triage, and response workflows.
Design and secure AI and LLM enabled solutions while defining enterprise AI security guardrails.
Partner with cross-functional teams to identify risks and implement solutions to close security gaps.
Evaluate emerging technologies to determine necessary new investments for the security roadmap.
What we're looking for
Must have 5+ years of experience in security engineering, software development, or equivalent work experience.
Must have proven experience managing a diverse range of enterprise security technologies.
Must have strong proficiency in scripting and software development languages for API integration.
Must have demonstrated experience in security architecture, including threat modeling and architecture reviews across cloud and enterprise environments.
Must have experience designing AI-driven automation or integrating AI/LLM capabilities into operational workflows.
Must have working knowledge of AI and LLM security risks and frameworks like OWASP Top 10 for LLM Applications and NIST AI Risk Management Framework.
Must be able to read, write, speak, and understand English.
Experience in working in a highly matrixed organization (preferred).
Threat Modeling
Cloud-Native Architecture
Python
Java
Go
Swift
Kubernetes
Container Orchestration
Distributed Systems
Artificial Intelligence
Machine Learning
Security Review
Multi-tenant System Design
Platform as a Service
Software as a Service
AI Security
AI Red Teaming
AI Guardrails
AI Security Posture Management (AI SPM)
Model Evaluation
OWASP Top 10 for LLM
NIST
ISO
Incident Response
Security Architecture
Cloud Security
CISSP
GIAC
CEH
OSCP