> Markdown version of [/jobs/ext/505452-mid-level-security-auditor](https://www.wearedevelopers.com/jobs/ext/505452-mid-level-security-auditor). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Mid-Level Security Auditor

- **Company:** Reynolds and Reynolds
- **Location:** Houston, TX, United States (Remote available)
- **Experience:** Experienced
- **Salary:** $130,000.0 - $170,000.0
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, Software as a Service, Cloud Computing Security, Configuration Management, CompTIA Security+, System Configuration, Document Management Systems, Github, Identity and Access Management, Information Technology Audit, Integrated Development Environments, Network Segmentation, PCI Data Security Standards, Systems Development Life Cycle, Information Technology Security Auditing, Data Logging, Cloud Platform System, Okta, Software Version Control
- **Published:** June 11, 2026
- **Apply:** https://www.juju.com/job/00000000g7emkf

## About the Role

3-7 years of experience in security audit, IT audit, cybersecurity operations, or a related technical role; Working knowledge of at least one major control framework (NIST CSF, NIST SP 800-53, PCI DSS, ISO 27001, or SOC 2); interest in deepening expertise in core company frameworks; Practical experience with cloud environments (AWS preferred) and core control areas (IAM, logging, encryption, network segmentation, configuration management); Familiarity with identity platforms (Okta or similar), source code management (GitHub), and mainstream SaaS applications; Strong skills in written communication, organization, and attention to detail; Progress toward or completion of a relevant certification (CISA, Security+, CCSP, AWS Certified Security, etc.) is preferred; Collaborative, professional approach and a desire to grow into a Senior Security Auditor role



## Description

As a Mid-Level Security Auditor, you will play a key role in our Security Audit function, executing audits across cloud, on-premise, SaaS, and software development environments. You will independently conduct meaningful sections of audit engagements, collaborate with control owners and other stakeholders, and help ensure our compliance with major industry frameworks (NIST CSF 2.0, NIST 800-53, PCI DSS, FTC Safeguards Rule).

\nResponsibilities:\n- Execute assigned audit procedures across AWS, on-premise, and other platforms, including control testing, documentation, and analysis of system configurations, access reviews, change tickets, and vulnerability scans.\n- Conduct walkthroughs and interviews with control owners to understand processes, document control environments, and identify potential gaps.\n- Draft clear, organized working papers and preliminary audit findings, including observation, risk, recommendations, and supporting evidence.\n- Support both internal (NIST CSF 2.0 maturity assessments, control evaluations) and external (PCI DSS, regulatory) audits by gathering evidence, coordinating with stakeholders, and tracking remediation of findings.\n- Continue to develop expertise in cloud security, SDLC controls, and compliance frameworks while effectively managing multiple audit workstreams.\n#LI-Remote\n


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Innovating Developer Tools with AI: Insights from GitHub Next](https://www.wearedevelopers.com/videos/1268-innovating-developer-tools-with-ai-insights-from-github-next)
- [Crypto-secure Data Management with In-Database Blockchain](https://www.wearedevelopers.com/videos/632-crypto-secure-data-management-with-in-database-blockchain)
- [SRE Methods In an Agency Environment](https://www.wearedevelopers.com/videos/348-sre-methods-in-an-agency-environment)
- [Bringing AI Model Testing and Prompt Management to Your Codebase with GitHub Models](https://www.wearedevelopers.com/videos/1536-bringing-ai-model-testing-and-prompt-management-to-your-codebase-with-github-models)
- [Build Delightful Mobile Experiences with Kotlin, Realm, and Atlas Device Sync](https://www.wearedevelopers.com/videos/694-build-delightful-mobile-experiences-with-kotlin-realm-and-atlas-device-sync)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [React Developer Salary [2023]](https://www.wearedevelopers.com/magazine/198-react-developer-salary-2023)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)