Yes, you heard it right. As you have mentioned, Security Auditor is a mid-level job and to become a Security Auditor, you'll have to start working as an entry-level role and then get promoted. The entry-level jobs you are looking for are:
- Security Administrator
- Network Administrator
- System Administrator
These jobs will give you good exposure to security issues. Then get some certification and you may get promoted to become a Security Auditor