Remote Senior IT Security Auditor (Federal Compliance)

Aptnexus; United States; Remote; USD 115.000 - 140.000; Vollzeit

Zusammenfassung

AptNexus is seeking a Senior IT Security Auditor to perform cybersecurity compliance audits for federal government clients. You will plan, conduct, and report on audits of technical and management controls, across on-prem and cloud environments, using NIST SP 800-53, CIS, and DISA STIGs.

The role requires hands-on testing on diverse platforms (Windows, Linux, UNIX, macOS) and strong technical writing skills, with an emphasis on risk-based remediation planning.

Qualifikationen

• 7+ years in cybersecurity, including 5+ years auditing federal systems.
• Expert knowledge of NIST SP 800-53 (moderate/high baselines) and RMF; understanding of NIST SP 800-30 and FIPS.
• Hands-on testing across Windows, Linux, UNIX, macOS; virtualization/containers; networks; databases; and cloud services.

Aufgaben

• Plan and conduct cybersecurity audits of government partner systems and data flows.
• Perform hands-on control testing against NIST SP 800-53, CIS Benchmarks, and DISA STIGs.
• Prepare audit findings, remediation timelines, and after-action reports.

Kenntnisse

NIST SP 800-53

Federal audits experience

Cloud & SaaS security

Windows/Linux/macOS testing

Virtualization & containers

Tenable Nessus & SCAP

FIPS & encryption tech

Mainframe security (RACF/ACF2)

Audit reporting & writing

Excel & Word (VBA helpful)

Ausbildung

Bachelor's degree in IT / cybersecurity / information systems

Tools

VMware

Docker

Kubernetes

OpenShift

DISA STIGs

Jobbeschreibung

AptNexus is seeking a Senior IT Security Auditor to perform cybersecurity compliance audits for federal government clients. You will plan, conduct, and report on audits of technical and management controls, across on-prem and cloud environments, using NIST SP 800-53, CIS, and DISA STIGs.

The role requires hands-on testing on diverse platforms (Windows, Linux, UNIX, macOS) and strong technical writing skills, with an emphasis on risk-based remediation planning.