ZipRecruiter

Log In

1

Cyber Security Auditor Jobs in Reston, VA (NOW HIRING)

Leidos

Cybersecurity Engineer SME

Bethesda, MD · On-site

... auditing, configuration management, and change control. * Professional cybersecurity certifications such as Security+, CISSP, CySA+, CEH, or GCIH. * Education/Experience : Requires MS degree and 15 ...

Leidos

Cybersecurity Engineer SME

Bethesda, MD

... auditing, configuration management, and change control. * Professional cybersecurity certifications such as Security+, CISSP, CySA+, CEH, or GCIH. * Education/Experience : Requires MS degree and 15 ...

previous pagenext page

Showing results 21-40

All JobsCyber Security Auditor JobsCyber Security Auditor Jobs in Reston, VA

Cyber Security Auditor information

See Reston, VA salary details

$59.2K

$138.1K

$193.2K

How much do cyber security auditor jobs pay per year?

As of Aug 8, 2026, the average yearly pay for cyber security auditor in Reston, VA is $138,129.00, according to ZipRecruiter salary data. Most workers in this role earn between $115,300.00 and $155,800.00 per year, depending on experience, location, and employer.

What are the key skills and qualifications needed to thrive in the cyber security auditor position, and why are they important?

To thrive as a Cyber Security Auditor, you need a comprehensive understanding of information security principles, risk assessment methodologies, and auditing standards, usually backed by a degree in cybersecurity, information technology, or a related field. Familiarity with technical tools such as vulnerability scanners, SIEM solutions, and frameworks like NIST or ISO 27001, along with certifications like CISA or CISSP, is highly valued. Strong analytical thinking, attention to detail, and effective communication are key soft skills essential for collaborating with diverse teams and presenting findings clearly. These skills and qualifications enable Cyber Security Auditors to effectively identify vulnerabilities, ensure compliance, and help organizations safeguard critical assets.

What are the typical daily responsibilities of a cyber security auditor?

Cyber Security Auditors spend their days conducting thorough assessments of organizational security policies, examining system configurations, and testing controls to ensure compliance with industry standards and best practices. They often analyze logs, review incident reports, and perform vulnerability scans, followed by interviewing staff to understand security protocols. Auditors also document their findings, prepare detailed reports, and communicate recommendations to IT management and stakeholders. The role requires a balance of technical assessments and clear, concise communication with both technical and non-technical teams.

How to become a cyber security auditor?

To become a cyber security auditor, individuals typically need a bachelor's degree in computer science, information technology, or a related field. Gaining relevant certifications such as Certified Information Systems Auditor (CISA) or Certified Information Security Manager (CISM), along with experience in IT security, helps qualify for the role. Strong knowledge of security frameworks, risk assessment, and auditing tools is essential for success in this field.

What is a cyber security auditor?

A Cyber Security Auditor is responsible for assessing an organization’s security policies, controls, and practices to ensure they comply with industry regulations and standards. They identify vulnerabilities, evaluate risk management strategies, and recommend improvements to protect sensitive data and systems. Auditors conduct assessments, review compliance frameworks, and generate reports detailing security gaps and remediation steps. Their role is crucial in safeguarding an organization against cyber threats while ensuring regulatory and legal adherence.

What are popular job titles related to Cyber Security Auditor jobs in Reston, VA? For Cyber Security Auditor jobs in Reston, VA, the most frequently searched job titles are:
What job categories do people searching Cyber Security Auditor jobs in Reston, VA look for? The top searched job categories for Cyber Security Auditor jobs in Reston, VA are:
What cities near Reston, VA are hiring for Cyber Security Auditor jobs? Cities near Reston, VA with the most Cyber Security Auditor job openings:
Cyber Security Auditor jobs near you
Infographic showing various Cyber Security Auditor job openings in Reston, VA as of August 2026, with employment types broken down into 79% Full Time, 18% Part Time, and 3% Contract. Highlights an 92% Physical, 3% Hybrid, and 5% Remote job distribution, with an average salary of $138,129 per year, or $66.4 per hour.

Cybersecurity Systems Engineer / ISSM

AnaVation

Chantilly, VA • On-site

$58.50 - $72/hr

Full-time

Medical, Dental, Vision, Life, Retirement, PTO

Posted 10 days ago

Job description

Be Challenged and Make a Difference
In a world of technology, people make the difference. We believe if we invest in great people, then great things will happen. At AnaVation, we provide unmatched value to our customers and employees through innovative solutions and an engaging culture.
The Cybersecurity Systems Engineer / Information Systems Security Manager (ISSM) provides leadership for the organization's information security, governance, risk, and compliance program. The role is responsible for protecting the confidentiality, integrity, and availability of corporate and customer information systems while aligning cybersecurity practices with business objectives, contractual obligations, and regulatory requirements.
This position serves as the organization's primary cybersecurity advisor and works collaboratively with Information Technology, Program Management, Contracts, Human Resources, and Executive Leadership to maintain compliance with applicable cybersecurity frameworks and contractual obligations. This is a hands-on leadership role that combines information systems security management with responsibility for the secure administration, engineering, configuration, and maintenance of the organization's corporate and classified information technology environments.
Responsibilities:
  • Develop, implement, and continuously improve the corporate Information Security Program, serving as the primary ISSM and security lead for corporate, customer, classified, air-gapped, and standalone information systems.
  • Lead cybersecurity compliance activities associated with applicable regulations, contracts, and frameworks, including NIST SP 800-171, NIST SP 800-53, CMMC, CMMI, DFARS, FAR, ISO 27001, DCSA, RMF, ATO, and customer-specific requirements.
  • Design, implement, document, and oversee the secure operation and lifecycle management of corporate, cloud, classified, air-gapped, and standalone systems, ensuring appropriate security controls are implemented and maintained.
  • Develop and maintain SSPs, POA&Ms, authorization packages, policies, standards, procedures, system and network diagrams, inventories, configuration records, and documentation supporting account management, media control, auditing, incident response, and continuous monitoring.
  • Lead internal and external security assessments, ISO audits, CMMC readiness activities, DCSA reviews, self-inspections, vulnerability assessments, control validation, and remediation of identified findings.
  • Conduct risk assessments, oversee vulnerability management and remediation tracking, monitor emerging threats and regulatory changes, and provide executive-level reporting on cybersecurity posture, compliance, vulnerabilities, and risk.
  • Manage cybersecurity incidents, including reporting, investigation, documentation, corrective action, and coordination with appropriate internal, customer, and government stakeholders.
  • Review system changes from a security perspective and partner with IT personnel to ensure secure configuration management, patching, endpoint protection, identity and access management, backups, system hardening, and lifecycle maintenance.
  • Administer, configure, secure, maintain, and troubleshoot Windows-based servers and workstations, network and security devices, Microsoft 365 Government, Entra ID, Intune, Defender, Purview, privileged access, cloud services, and related technologies.
  • Coordinate with the Facility Security Officer, Insider Threat Program Senior Official, system administrators, executive leadership, auditors, government customers, third-party assessors, vendors, and managed service providers to ensure security responsibilities are assigned and executed.
  • Develop and deliver security awareness and annual cybersecurity training for employees.
  • Support business development activities through proposal responses, security compliance documentation, technology evaluations, and recommendations for security and infrastructure improvements..

Knowledge, Skills & Abilities
  • Strong knowledge of cybersecurity principles, risk management, and security architecture.
  • Strong working knowledge of systems administration, endpoint and identity management, networking, cloud services, system hardening, backup and recovery, and technical troubleshooting, with the ability to translate security and contractual requirements into practical technical controls and system configurations.
  • Ability to independently perform and document technical work while providing sound security guidance to leadership and balancing compliance, operational availability, cost, and business requirements.
  • Ability to interpret government regulations and contractual security requirements.
  • Excellent written, verbal, presentation, and executive communication skills.
  • Strong analytical and problem-solving skills.
  • Excellent organizational and project management abilities.
  • Ability to manage multiple priorities while meeting deadlines.
  • Strong customer service orientation and collaborative leadership style.
  • Ability to influence stakeholders across all levels of the organization.

Required Qualifications:
  • Bachelor's degree in information security, Cybersecurity, Computer Science, Information Technology, or a related field (or equivalent combination of education and experience).
  • 7+ years of progressive cybersecurity or information assurance experience.
  • Experience serving as an ISSM, ISSO, IA Manager, or similar role.
  • Working knowledge of NIST SP 800-171, NIST SP 800-53, RMF, DFARS 252.204-7012, CMMC, and DoD cybersecurity requirements.
  • Experience developing SSPs, POA&Ms, security policies, standards, and procedures.
  • Experience supporting security audits and assessments.
  • Excellent written, verbal, and presentation skills.
  • Ability to effectively communicate cybersecurity concepts to both technical and non-technical audiences.

Physical Requirements:
  • Ability to work at a computer for extended periods.
  • Occasionally lift up to 25 pounds.

Security Clearance:
  • Ability to obtain and maintain a U.S. Government security clearance.
  • Active Secret clearance required; Top Secret and SCI eligibility is desirable.

Preferred Qualifications:
  • CISSP certification (or ability to obtain within an agreed timeframe).
  • Certifications such as CISM, Security+, CASP+, CCSP, CGRC (formerly CAP), CEH.
  • Experience with Microsoft 365 Government, Microsoft Defender, Microsoft Entra ID (Azure AD), Intune, and Microsoft Purview.
  • Experience with SIEM, EDR, vulnerability scanning, and cloud security platforms.
  • Experience supporting CMMC Level 2 or 3, ISO 27001, and/or ISO 20000 compliance programs.
  • Experience with developing policies and procedures and passing DCSA audits.
  • Experience supporting Defense Industrial Base (DIB) contractors.
  • Experience supporting classified and unclassified information systems.

Benefits
  • Generous cost sharing for medical insurance for the employee and dependents
  • 100% company paid dental insurance for employees and dependents
  • 100% company paid long-term and short-term disability insurance
  • 100% company paid vision insurance for employees and dependents
  • 401k plan with generous match and 100% immediate vesting
  • Competitive Pay
  • Generous paid leave and holiday package
  • Tuition and training reimbursement
  • Life and AD&D Insurance

About AnaVation
AnaVation is the leader in solving the most complex technical challenges for collection and processing in the U.S. Federal Intelligence Community. We are a US owned company headquartered in Chantilly, Virginia. We deliver groundbreaking research with advanced software and systems engineering that provides an information advantage to contribute to the mission and operational success of our customers. We offer complex challenges, a top-notch work environment, and a world-class, collaborative team.
If you want to grow your career and make a difference while doing it, AnaVation is the perfect fit for you!
AnaVation is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to sex, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law.

Apply