Talent.com
Information Systems Security Officer

Information Systems Security Officer

Oak Ridge National LaboratoryOak Ridge, TN, US
14 hours ago
Job type
  • Full-time
Job description

Select how often (in days) to receive an alert :

Overview

We are currently seeking qualified applicants with Information Systems Security Officer (ISSO) experience to support the Field Intelligence Operations Division's classified operations in the areas of Classified Intelligence IT / Information Assurance (IA), Classified R&D Computing, and physical and personnel security in the Field Intelligence Operations Division (FIOD) - where cutting-edge research and technology meets national defense. Under the Department of Energy (DOE), Office of Intelligence and Counterintelligence (IN) authorities, the FIOD serves as the ORNL focal point for all intelligence community matters and supports national security science by providing secure IT, communications, facilities, and analysis.

Purpose : The ISSO will assist the Information Systems Security Manager (ISSM) in the certification and accreditation (C&A) of systems / networks and implementation of cyber security requirements and procedures across the National Security Sciences Directorate at Oak Ridge National Laboratory (ORNL). The National Security Sciences Directorate conducts research and development to solve some of the nation's most difficult security challenges and adversaries. The directorate houses S&T leadership in cybersecurity and cyber-physical resiliency, data analytics, geospatial science and technology, nuclear nonproliferation, and high-performance computing for sensitive national security missions. The FIOD is housed within NSSD and provides the operational security, information assurance, and information technology support needed for ORNL to maintain Sensitive Compartmented Information Facilities, clearances, and systems.

Duties and Responsibilities

The ISSO is a primary stakeholder and facilitator of the continuous monitoring efforts that promote RMF compliance throughout the organization. The ISSO provides clear direction and assists programmatic IT and infrastructure support personnel with the application of security patches and secure configurations commensurate with Security Technical Implementation Guides (STIGs). The ideal candidate will have experience in designing, implementing, and managing security solutions within classified environments, with particular emphasis on leveraging Splunk for security information and event management (SIEM). Routine collaboration and consultation with the Information Systems Security Manager (ISSM) regarding the design, development, integration, and analysis of classified information systems under general supervision, the candidate is responsible for performing a full range of Information Assurance functions in support of the security needs of the ORNL FIE ISSM / Group lead.

System Security Oversight

  • Provide day-to-day cybersecurity support for classified / Sensitive Compartmented Information (SCI) systems.
  • Ensure compliance with DOE-IN, DoD, and NIST requirements across multiple facilities.
  • Develop, review, and maintain System Security Plans (SSPs) and related RMF artifacts (hardware / software lists, diagrams, PPSM, categorization forms, continuous monitoring plans, contingency plans).

Security Engineering & Compliance

  • Support design and implementation of security controls, ensuring alignment with DISA STIGs and NIST 800-53.
  • Assist with security architecture reviews, risk assessments, vulnerability analyses, and mitigation strategies.
  • Provide technical input for STIG feasibility and implementation, including possible automation of compliance checks.
  • Manage Splunk and SolarWinds environments for log collection, correlation, and monitoring.
  • Create and maintain dashboards, alerts, and reports to support real-time detection and response.
  • Investigate security incidents, document findings, and implement corrective measures.
  • Perform regular audit log reviews, authorized data transfers, and media control in accordance with policy.
  • Develop and maintain system documentation to support system authorization and accreditation.
  • Track system changes, security impact assessments, and coordinate with ISSM on approvals.
  • Conduct and support continuous monitoring activities, including vulnerability management and reporting.
  • Governance & Training

  • Conduct annual account reviews, self-inspections, and compliance testing.
  • Train users and system administrators on security procedures and policy.
  • Support ISSM in implementing local policies, reporting metrics, and preparing for inspections.
  • Continuously update and enhance documentation best practices and local security procedures, train users on these procedures, and consistently apply appropriate ES&H standards.
  • Maintain a strong commitment to the implementation and perpetuation of values and ethics.
  • Basic Requirements

  • Bachelor's degree in information technology or technical equivalent and a minimum of five years of experience in cyber security and the C&A process. An overall combination of equivalent education and experience may be considered.
  • Current TS clearance with SCI eligibility
  • Working knowledge of RMF process & requirements
  • Working knowledge of NIST and CNSSI requirements
  • Must be organized, self-motivated, and able to work with minimal guidance
  • Excellent written and verbal communication skills with an ability to interface with numerous cognizant security agencies, customers, and senior managers
  • Previous experience in developing, testing, and collecting artifacts for RMF packages and BoEs of multiple systems
  • Experience in authorized data transfers across multiple systems and different classifications
  • Desired Skills

  • Current TS clearance with SCI eligibility
  • Relevant ISSO / ISSE experience within the DoD or Intelligence Community
  • CISSP, SEC+, or other relevant certifications
  • Previous experience supporting SCI environments
  • Deep understanding of incident response procedures and enterprise security tool implementation
  • Knowledge of the DISA STIGs and configuration standards
  • Working knowledge of industry-standard tools for audit reduction, vulnerability scanning, and malware analysis (e.g., Splunk, Tenable Nessus, HBSS components, SCAP Checker, STIG viewer)
  • Experience with Security Directives, Policies, Publications, and Regulations
  • Special Requirement

    This position requires the ability to obtain and maintain a Sensitive Compartmented Information (SCI) clearance from the Department of Energy. It is a Workplace Substance Abuse (WSAP) testing designated position requiring a pre-placement drug test and ongoing random drug testing. Due to the SCI, you may also be subject to random polygraph testing.

    Security, Credentialing, and Eligibility Requirements

    For employment at ORNL, a Real ID compliant form of identification is required. ORNL is subject to DOE access restrictions. All employees must be able to obtain and maintain a federal PIV card as mandated by HSPD-12 and DOE Order 473.1A, which requires a favorable post-employment background investigation. New employees must successfully complete and pass a Federal Tier 1 background check. This investigation includes disclosure of illegal drug activities within the last year and may include substances that are illegal under federal law.

    For foreign national candidates : If you have not resided in the U.S. for three consecutive years, you are not eligible for the PIV credential and must obtain a favorable Local Site Specific Only (LSSO) risk determination. After meeting the residency requirement, you will be required to obtain a PIV credential to maintain employment.

    About ORNL

    As a U.S. Department of Energy (DOE) Office of Science national laboratory, ORNL has an 80-year legacy of addressing the nation's challenges. Our team includes over 7,000 individuals. Our goal is to create an environment where diverse perspectives are valued, supporting ORNL as a top choice for employment.

    ORNL offers competitive pay and benefits, including medical and retirement plans, flexible work hours, on-site fitness, banking, and cafeteria facilities.

    Benefits

  • Prescription Drug Plan
  • Dental Plan
  • Vision Plan
  • 401(k) Retirement Plan
  • Contributory Pension Plan
  • Life Insurance
  • Disability Benefits
  • Generous Vacation and Holidays
  • Parental Leave
  • Legal Insurance with Identity Theft Protection
  • Employee Assistance Plan
  • Flexible Spending Accounts
  • Health Savings Accounts
  • Wellness Programs
  • Educational Assistance
  • Relocation Assistance
  • Employee Discounts
  • If you have difficulty using the online application system or need an accommodation to apply due to a disability, please email : ORNLRecruiting@ornl.gov

    This position will remain open for a minimum of 5 days after which it will close when a qualified candidate is identified and / or hired.

    We accept Word (.doc, .docx), Adobe (unsecured .pdf), Rich Text Format (.rtf), and HTML (.htm, .html) up to 5MB in size. Resumes from third party vendors will not be accepted; these resumes will be deleted and the candidates submitted will not be considered for employment.

    If you have trouble applying for a position, please email ORNLRecruiting@ornl.gov.

    ORNL is an equal opportunity employer. All qualified applicants, including individuals with disabilities and protected veterans, are encouraged to apply. UT-Battelle is an E-Verify employer.

    J-18808-Ljbffr

    Create a job alert for this search

    Information System Security Officer • Oak Ridge, TN, US

    Related jobs
    • Promoted
    Information Security Training Lead

    Information Security Training Lead

    VirtualVocationsKnoxville, Tennessee, United States
    Full-time
    A company is looking for an Information Security Training Awareness Lead to enhance cybersecurity awareness through training and outreach initiatives. Key Responsibilities Develop and implement an...Show moreLast updated: 2 days ago
    • Promoted
    Director of Information Security

    Director of Information Security

    VirtualVocationsKnoxville, Tennessee, United States
    Full-time
    A company is looking for a Director of Information Security.Key Responsibilities Develop and execute a comprehensive information security roadmap Oversee security governance and risk management,...Show moreLast updated: 30+ days ago
    • Promoted
    Security Operations Analyst

    Security Operations Analyst

    VirtualVocationsKnoxville, Tennessee, United States
    Full-time
    A company is looking for a Security Operations Analyst.Key Responsibilities Monitor security tools and alerts to identify suspicious activity Investigate security incidents and coordinate respon...Show moreLast updated: 30+ days ago
    • Promoted
    Texas Licensed Security Operations Analyst

    Texas Licensed Security Operations Analyst

    VirtualVocationsKnoxville, Tennessee, United States
    Full-time
    A company is looking for a Security Operations Analyst.Key Responsibilities Analyze security incidents and provide timely responses Monitor security systems and generate reports on security metr...Show moreLast updated: 1 day ago
    • Promoted
    • New!
    SOC Analyst Level 2

    SOC Analyst Level 2

    VirtualVocationsKnoxville, Tennessee, United States
    Full-time
    A company is looking for a SOC Analyst (L2) to maintain its cybersecurity posture through monitoring, detection, and incident response. Key Responsibilities Monitor and analyze security alerts to ...Show moreLast updated: 16 hours ago
    • Promoted
    Principal Security Engineer

    Principal Security Engineer

    VirtualVocationsKnoxville, Tennessee, United States
    Full-time
    A company is looking for a Principal Security Engineer (IC4).Key Responsibilities Contribute to the design, implementation, integration, and hands-on analyses to improve software behavior underst...Show moreLast updated: 30+ days ago
    • Promoted
    • New!
    Security Controls Assessor

    Security Controls Assessor

    VirtualVocationsKnoxville, Tennessee, United States
    Full-time
    A company is looking for a Security Controls Assessor to support a high-visibility federal program focused on enhancing cybersecurity and privacy measures. Key Responsibilities Conducting security...Show moreLast updated: 18 hours ago
    • Promoted
    Director of Infrastructure Security

    Director of Infrastructure Security

    VirtualVocationsKnoxville, Tennessee, United States
    Full-time
    A company is looking for a Director, Infrastructure Security Services.Key Responsibilities Lead the design and implementation of enterprise-wide security capabilities to protect critical IT asset...Show moreLast updated: 3 days ago
    • Promoted
    Oracle Cloud Security Analyst

    Oracle Cloud Security Analyst

    VirtualVocationsKnoxville, Tennessee, United States
    Full-time
    A company is looking for an Oracle Cloud Application Security Analyst.Key Responsibilities Develop and implement security policies and procedures for the Oracle Financial Applications system Def...Show moreLast updated: 2 days ago
    • Promoted
    South Carolina Licensed Information Security Analyst

    South Carolina Licensed Information Security Analyst

    VirtualVocationsKnoxville, Tennessee, United States
    Full-time
    A company is looking for an Information Security GRC Analyst II.Key Responsibilities Develop and maintain information security policies and procedures in alignment with regulatory requirements C...Show moreLast updated: 1 day ago
    • Promoted
    Information Security Engineer

    Information Security Engineer

    VirtualVocationsKnoxville, Tennessee, United States
    Full-time
    A company is looking for an Information Security Engineer to join their Information Security and Technology team.Key Responsibilities Drive decision-making for platform and application security a...Show moreLast updated: 30+ days ago
    • Promoted
    Security Operations Center Manager

    Security Operations Center Manager

    VirtualVocationsKnoxville, Tennessee, United States
    Full-time
    A company is looking for a Security Operations Center (SOC) Manager.Key Responsibilities Lead the Security Operations Center (SOC) with a focus on strategic planning and operational excellence O...Show moreLast updated: 30+ days ago
    • Promoted
    • New!
    Visiting Professor of Information Systems

    Visiting Professor of Information Systems

    VirtualVocationsKnoxville, Tennessee, United States
    Full-time
    A company is looking for a Visiting Professor of Computer Information Systems.Key Responsibilities Develop and provide students with an approved syllabus that includes terminal course objectives ...Show moreLast updated: 2 hours ago
    • Promoted
    Security Analyst

    Security Analyst

    VirtualVocationsKnoxville, Tennessee, United States
    Full-time
    A company is looking for a Security Analyst (Governance Program) to work remotely.Key Responsibilities Develop and implement governance frameworks for security policies and procedures Conduct ri...Show moreLast updated: 30+ days ago
    • Promoted
    Lead IT Security Engineer

    Lead IT Security Engineer

    VirtualVocationsKnoxville, Tennessee, United States
    Full-time
    A company is looking for a Lead IT Security Engineer.Key Responsibilities Manage and optimize the Splunk security environment for performance and efficiency Architect cybersecurity solutions and...Show moreLast updated: 2 days ago
    • Promoted
    Cloud Operations Security Officer

    Cloud Operations Security Officer

    VirtualVocationsKnoxville, Tennessee, United States
    Full-time
    A company is looking for a Business Information Security Officer, Cloud Operations.Key Responsibilities Serve as the trusted security advisor for Cloud Operations teams Develop and implement bus...Show moreLast updated: 3 days ago
    • Promoted
    Senior Information Security Engineer

    Senior Information Security Engineer

    VirtualVocationsKnoxville, Tennessee, United States
    Full-time
    A company is looking for a Senior Information Security Engineer who will contribute to the architecture, implementation, and ongoing support of a comprehensive, enterprise-grade security program.Ke...Show moreLast updated: 30+ days ago
    • Promoted
    Security Architect

    Security Architect

    VirtualVocationsKnoxville, Tennessee, United States
    Full-time
    A company is looking for a Security Infrastructure Support Security Architect.Key Responsibilities : Architect, design, install, and maintain complex enterprise IT systems across hybrid environmen...Show moreLast updated: 30+ days ago
    • Promoted
    Senior Security Assurance Analyst

    Senior Security Assurance Analyst

    VirtualVocationsKnoxville, Tennessee, United States
    Full-time
    Security Assurance Analyst to lead the design, implementation, and optimization of enterprise information security controls and compliance programs. Key Responsibilities Lead and maintain SOC 2 an...Show moreLast updated: 1 day ago
    • Promoted
    • New!
    SOC Analyst Level 1

    SOC Analyst Level 1

    VirtualVocationsKnoxville, Tennessee, United States
    Full-time
    A company is looking for a SOC Analyst (L1).Key Responsibilities Monitor and analyze security alerts to detect potential threats and optimize detection rules Execute incident response activities...Show moreLast updated: 16 hours ago