Information Systems Security Officer

Requisition Id 15396 

 

Overview:  

We are currently seeking qualified applicants with Information Systems Security Officer (ISSO) experience to support the Field Intelligence Operations Division’s classified operations in the areas of Classified Intelligence Information Technology (IT)/Information Assurance (IA), Classified R&D Computing, and physical and personnel security in the Field Intelligence Operations Division (FIOD) - where cutting-edge research and technology meets national defense. Under the Department of Energy (DOE), Office of Intelligence and Counterintelligence (IN) authorities, the FIOD serves as the ORNL focal point for all intelligence community matters and supports national security science by providing secure IT, communications, facilities, and analysis.

 

Purpose:

The ISSO will assist the Information Systems Security Manager (ISSM) in the certification and accreditation (C&A) of systems/networks and implementation of cyber security requirements and procedures across the National Security Sciences Directorate at Oak Ridge National Laboratory (ORNL). The National Security Sciences Directorate conducts research and development to solve some of the nation's most difficult security challenges and adversaries.  The directorate houses S&T leadership in cybersecurity and cyber-physical resiliency, data analytics, geospatial science and technology, nuclear nonproliferation, and high-performance computing for sensitive national security missions. The FIOD is housed within NSSD and provides the operational security, information assurance, and information technology support needed for ORNL to maintain Sensitive Compartmented Information Facilities, clearances, and systems. 

  

  

Duties and Responsibilities:

The ISSO is a primary stakeholder and facilitator of the continuous monitoring efforts that promote RMF compliance throughout the organization. The ISSO provides clear direction and assists programmatic IT and infrastructure support personnel with the application of security patches and secure configurations commensurate with Security Technical Implementation Guides (STIGs). The ideal candidate will have experience in designing, implementing, and managing security solutions within classified environments, with particular emphasis on leveraging Splunk for security information and event management (SIEM). Routine collaboration and consultation with the Information Systems Security Manager (ISSM) regarding the design, development, integration, and analysis of classified information systems under general supervision, the candidate is responsible for performing a full range of Information Assurance functions in support of the security needs of the ORNL FIE ISSM/Group lead.

 

These responsibilities include: 

System Security Oversight

• Provide day-to-day cybersecurity support for classified/Sensitive Compartmented Information (SCI) systems.
• Ensure compliance with DOE-IN, DoD, and NIST requirements across multiple facilities.
• Develop, review, and maintain System Security Plans (SSPs) and related RMF artifacts (hardware/software lists, diagrams, PPSM, categorization forms, continuous monitoring plans, contingency plans).
  
  

Security Engineering & Compliance

• Support design and implementation of security controls, ensuring alignment with DISA STIGs and NIST 800-53.
• Assist with security architecture reviews, risk assessments, vulnerability analyses, and mitigation strategies.
• Provide technical input for STIG feasibility and implementation, including possible automation of compliance checks.
  
  

Monitoring & Incident Response

• Manage Splunk and SolarWinds environments for log collection, correlation, and monitoring.
• Create and maintain dashboards, alerts, and reports to support real-time detection and response.
• Investigate security incidents, document findings, and implement corrective measures.
• Perform regular audit log reviews, authorized data transfers, and media control in accordance with policy.
  
  

Risk Management Framework (RMF) & Documentation

• Develop and maintain system documentation to support system authorization and accreditation.