{"id":2471833,"url":"https://alion.io/job/aptnexus-senior-it-security-auditor","title":"Senior IT Security Auditor","company":{"id":4423852,"name":"APTNEXUS","domain":"aptnexus.com","url":"https://alion.io/company/aptnexus","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Rippling","truth_index":null},"role":"Finance","role_family":"Finance","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Washington, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":115000,"max":140000,"currency":"USD","period":"year","gross":null,"usd_annual":140000},"salary_estimate":null,"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CIS Benchmarks","optional":false},{"name":"Docker","optional":false},{"name":"FedRAMP","optional":false},{"name":"Hyper-V","optional":false},{"name":"Kubernetes","optional":false},{"name":"Linux","optional":false},{"name":"Microsoft Excel","optional":false},{"name":"Nessus","optional":false},{"name":"OpenShift","optional":false},{"name":"Unix","optional":false},{"name":"VMWare","optional":false},{"name":"VPN","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-10-07T21:17:33Z","employer_posted_date":"2026-10-07","last_verified_at":"2026-10-14T09:09:36Z","board_verified":true,"closed_at":null,"days_open":6,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":6},"description":"About APTNEXUS\nSince our founding 2012, APTNEXUS has empowered federal agencies and commercial enterprises to navigate the complexities of the digital landscape. As a quality-driven small business, we specialize in the seamless delivery of IT modernization and elite cybersecurity solutions. We help our clients modernize and fortify their technology stacks -ensuring their most critical data and assets remain resilient, optimized, and secure in an evolving threat environment.\nClearance:\nAbility to obtain and maintain a Minimum Background Investigation (MBI) for our Department of Treasury customer. Candidates must reside in, and perform all work from, the continental United States or its outlying territories.\nLocation:\nRemote (United States)\nWork Schedule:\nFull-time, remote. Must be available during core business hours (Eastern Time) to support scheduled audit activities. Travel to audited organization sites may be required on occasion, with advance notice.\nSalary Range:\n$115,000 to $140,000 annually, commensurate with experience\nPosition Overview:\nAptNexus is seeking a Senior IT Security Auditor to perform cybersecurity compliance audits for our Department of Treasury customer. The program audits federal, state, and local government organizations that receive sensitive federal data, evaluating their information systems against security requirements tailored from NIST SP 800-53. In this role, you will plan and conduct audits of technical and management controls, perform hands-on configuration testing across operating systems, databases, network devices, cloud services, and mainframe platforms, and deliver clear, defensible findings to customer personnel and the audited organizations. The ideal candidate is a detail-oriented self-starter who combines disciplined audit practice with genuine technical depth.\nDuties/Responsibilities:\nPlan and conduct cybersecurity compliance audits of government partner organizations, establishing audit scope based on in-scope systems, data flows, and technologies.\nConduct pre-audit scoping calls to validate system inventories and data flows, and prepare scoping documentation identifying in-scope technologies, versions, support status, shared systems, applicable test procedures, and estimated level of effort.\nDevelop audit schedules and recommend auditor assignments that cover every in-scope technology while minimizing conflicts.\nPerform hands-on technical control testing using automated scanning tools and manual configuration review against NIST SP 800-53 controls, CIS Benchmarks, and DISA STIGs.\nEvaluate management controls through interviews with system administrators and examination of policies, procedures, and system artifacts.\nPresent audit scope and data flows at opening conferences, and present technical findings at closing conferences.\nProvide daily written status updates during audits, including progress, outstanding work, potential critical findings, scope changes, and concerns.\nDocument test results and prepare preliminary findings, final audit report sections, and corrective action recommendations with risk-based remediation timelines.\nPrepare after action reports capturing lessons learned and recommendations for process improvement.\nReview the work of other auditors for accuracy and consistency, and provide technical guidance on complex testing and findings.\nEducate audited organizations on applicable security requirements and recommended approaches to remediation.\nComply with all customer security, privacy, and records management requirements, using only Government-furnished equipment and approved systems.\nRequired Skills\nMinimum of seven (7) years of cybersecurity experience, including at least five (5) years conducting federal cybersecurity audits or security control assessments.\nExpert working knowledge of NIST SP 800-53 (moderate and high baselines), the NIST Risk Management Framework, NIST SP 800-30, and FIPS, including the ability to audit against control sets tailored from NIST.\nHands-on experience testing and validating security configurations on Windows, Linux, UNIX, and macOS systems; virtualization and container platforms (VMware, Hyper-V, Docker, Kubernetes, OpenShift); databases; and network devices such as firewalls, routers, switches, VPN, wireless, VoIP, and SAN/NAS storage.\nExperience assessing cloud environments (AWS, Microsoft Azure and Microsoft 365, Google, Salesforce, and other FedRAMP-authorized services) across SaaS, IaaS, and PaaS service models.\nExperience auditing mainframe security, including IBM RACF or ACF2, is strongly preferred.\nWorking knowledge of encryption technologies and standards, including TLS, VPN, and FIPS 140 validated cryptography.\nProficiency with automated scanning and compliance tools such as Tenable Nessus and SCAP, and with CIS Benchmarks and DISA STIGs.\nExceptional technical writing skills, with the ability to produce clear, well-supported, and defensible audit findings.\nAdvanced Microsoft Excel and Word skills; experience developing or using VBA macros is preferred.\nDetail-oriented self-starter who takes ownership of assignments, manages competing priorities, and drives work to completion with minimal supervision.\nCertification:\nMust have at least one of the following certifications:\nCertified Information Systems Auditor (CISA) (preferred)\nCompTIA Cybersecurity Analyst (CySA+)\nGIAC Systems and Network Auditor (GSNA)\n\nPolished written and verbal communication skills, with the confidence to present findings to senior officials at audited organizations.\nSound professional judgment, objectivity, and integrity in handling sensitive information and audit results.\nMust meet federal eligibility requirements for a position of public trust, including U.S. citizenship or lawful permanent residency, federal tax compliance, Selective Service registration (if applicable), a credit check, and fingerprinting.\nMust complete customer-required security awareness training upon onboarding and annually thereafter.\nEducation Requirement:\nHigh school diploma required. Bachelor’s degree in information technology, cybersecurity, information systems, accounting, or a related field preferred.\nAptNexusis an Equal Opportunity Employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status.","description_format":"text","description_chars":6417,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"high_school","optional":false},"security_clearance":true,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Penetration Testing","Information Security"],"lifecycle":[{"event":"open","at":"2026-10-13T20:04:28Z"}],"visa":[],"liveness":{"score":85,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.849,"p_room":1,"age_days":6,"expected_fill_days":23,"reasons":["conf:2","win:early"],"computed_at":"2026-10-14T06:34:16Z"},"pay":{"stated_usd_annual":140000,"is_top_pay":true},"html_url":"https://alion.io/job/aptnexus-senior-it-security-auditor","json_url":"https://alion.io/job/aptnexus-senior-it-security-auditor.json","meta":{"generated_at":"2026-10-14T09:25:37Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":10576,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4423852},"rest":"https://alion.io/mcp/rest/get_company?id=4423852"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Faptnexus-senior-it-security-auditor"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Faptnexus-senior-it-security-auditor"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Faptnexus-senior-it-security-auditor"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/aptnexus-senior-it-security-auditor\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Faptnexus-senior-it-security-auditor"}]}