> Markdown version of [/jobs/ext/620272-senior-security-auditor](https://www.wearedevelopers.com/jobs/ext/620272-senior-security-auditor). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Security Auditor

- **Company:** Reynolds and Reynolds
- **Location:** Houston, TX, United States (Remote available)
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, Software as a Service, Cloud Computing Security, Code Review, Continuous Integration, Identity and Access Management, Information Technology Audit, Integrated Development Environments, Log Analysis, PCI Data Security Standards, Systems Development Life Cycle, Software Vulnerability Management, Okta
- **Published:** June 12, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=8b6118033dc17e5b

## About the Role

Do you have experience in SSO?, * 8+ years' experience in security/IT audit or technical risk roles, leading audits independently

 * Deep knowledge of AWS cloud security and infrastructure-as-code
 * Strong understanding of NIST CSF 2.0, NIST 800-53, PCI DSS, and FTC Safeguards, with practical application experience
 * Experience auditing SDLC, code reviews, CI/CD, and vulnerability management
 * Proficiency with identity providers (e.g., Okta), SSO, and privileged access
 * Excellent written communication and ability to produce executive-level reports
 * Proven mentoring and leadership skills
 * Certifications (CISA, CISSP, CCSP, AWS Security Specialty, QSA) strongly preferred
 * Experience in regulated industries (automotive, industrial, etc.) is a plus
 * Able to maintain objectivity and strong working relationships with control owners

## Description

The Senior Security Auditor leads complex and high-risk security audits across our cybersecurity, cloud, and software development environments. As a key technical leader, you ensure our security controls are effective, provide audit expertise, and mentor junior team members-all while balancing independence and cross-department collaboration., * Lead and execute end-to-end audits for AWS, on-premises, SDLC, IAM, and key SaaS platforms.

 * Develop engagement scopes, audit programs, and translate security frameworks (NIST CSF 2.0, NIST 800-53, PCI DSS, FTC Safeguards) into test procedures.
 * Assess controls through walkthroughs, configuration reviews, and log analysis; draft clear, actionable findings and remediation recommendations.
 * Guide NIST CSF 2.0 maturity assessments and document gaps.
 * Serve as audit liaison during external assessments, preparing evidence and managing requests.
 * Mentor mid- and junior auditors in methodologies and standards.
 * Track and validate remediation of findings.
 * Contribute to team operations, process improvements, and automation efforts.


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Progressive Delivery in Kubernetes](https://www.wearedevelopers.com/videos/949-progressive-delivery-in-kubernetes)
- [Are Code Reviews Worth It? Insights from 16 Years of Review Data](https://www.wearedevelopers.com/videos/1135-are-code-reviews-worth-it-insights-from-16-years-of-review-data)
- [SRE Methods In an Agency Environment](https://www.wearedevelopers.com/videos/348-sre-methods-in-an-agency-environment)
- [Leveraging Large Language Models for Legacy Code Translation: Challenges and Solutions](https://www.wearedevelopers.com/videos/1157-leveraging-large-language-models-for-legacy-code-translation-challenges-and-solutions)
- [Build a CI/CD pipeline to automate code reviews and ensure code quality](https://www.wearedevelopers.com/videos/349-build-a-ci-cd-pipeline-to-automate-code-reviews-and-ensure-code-quality)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [React Developer Salary [2023]](https://www.wearedevelopers.com/magazine/198-react-developer-salary-2023)
- [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Top Must-Visit Developer Conferences in the US in 2026](https://www.wearedevelopers.com/magazine/679-top-must-visit-developer-conferences-in-the-us-in-2026)
- [Why Attend a Developer Event in 2026?](https://www.wearedevelopers.com/magazine/688-why-attend-a-developer-event-in-2026)