Senior Information Systems Security Officer (ISSO) - Classified Environment

Requisition Id 17419 An active TS, Q, or TS/SCI clearance is required for consideration.Overview: The Field Intelligence Operations Division (FIOD) within the National Security Sciences Directorate (NSSD) at Oak Ridge National Laboratory is seeking an Information Systems Security Officer (ISSO). The ISSO will provide day-to-day security support for Sensitive Compartmented Information (SCI) and Special Access Program (SAP) systems across a range of classified environments.The ISSO works with the Information Systems Security Manager (ISSM) on the assessment and authorization of classified systems and networks and implements cybersecurity requirements and procedures. The role ensures systems comply with DOE and sponsor security policies, including Department of War (DoW) requirements, as documented in System Security Plans (SSPs), Authorizations to Operate (ATOs), and applicable security directives. This work follows the Risk Management Framework (RMF), the Joint Special Access Program Implementation Guide (JSIG), and Intelligence Community Directive (ICD) 503. Day-to-day work centers on system operations, maintenance, and disposal.As part of our team, you will be joining a vibrant group of professionals eager to provide premier customer service to ensure people and information technology remain secure. The team is collaborative and strives to ensure security practices and procedures are understood, implemented, and enforced.Major Duties/Responsibilities: Provide cybersecurity oversight for classified SCI and SAP information systems, ensuring compliance with applicable DOE, DoW, Intelligence Community, and NIST security requirements.Lead and coordinate Risk Management Framework (RMF) activities, security control implementation, system authorization efforts, and ongoing Authority to Operate (ATO) readiness.Develop, review, and maintain System Security Plans (SSPs), security authorization documentation, risk assessments, Plans of Action and Milestones (POA&Ms), and supporting compliance artifacts using Xacta and other approved tools.Collaborate with system engineers, network architects, and program teams to integrate cybersecurity requirements into classified infrastructure design, deployment, modernization, and operational activities.Support cybersecurity integration for high-performance computing (HPC), artificial intelligence (AI), advanced computing platforms, and data center infrastructure, including associated networks, storage, management systems, and research environments.Coordinate vulnerability management, system hardening, DISA STIG compliance, security impact assessments, and continuous monitoring activities to identify and mitigate cybersecurity risks.Evaluate security implications of system modifications, emerging technologies, network interconnections, and evolving mission requirements, recommending practical solutions that balance security and operational needs.Conduct and support system security testing, audit log reviews, annual self-inspections, incident investigations, contingency planning, and corrective action activities.Oversee applicable access control reviews, authorized data transfers, classified media handling, and other operational security procedures in accordance with established policies.Partner with the Information System Security Manager (ISSM), Authorizing Official (AO) representatives, engineering teams, and mission stakeholders to address authorization requirements, resolve security concerns, and support mission readiness.Advise program leadership on cybersecurity risks, compliance status, authorization dependencies, and opportunities to improve security processes and operational efficiency.Provide cybersecurity guidance and training to system administrators, technical personnel, and users, promoting consistent application of security policies and best practices.Uphold applicable environmental, safety, and health (ES&H) requirements and maintain the highest standards of professional and ethical conduct.Deliver ORNL's mission by aligning behaviors, priorities, and interactions with our core values of Impact, Integrity, Teamwork, Safety, and Service. Promote equal opportunity by fostering a respectful workplace in how we treat one another, work together, and measure success.Basic Qualifications:BS / BA degree in information technology or a related technical field and a minimum of eight years cybersecurity experience, including RMF assessment and authorization. Additional years of experience may be considered in lieu of a degree.An active TS, Q, or TS/SCI clearance is required for consideration.Ability to obtain and maintain SAP access.Experience supporting SCI environments.Security+ or another certification that meets DoD 8140 qualification requirements for this role.Working knowledge of:Risk Management Framework (RMF) process & requirements.NIST SP 800-53 and CNSSI 1253 Intelligence Community Directive 503 (ICD-503)Joint Special Access Program (SAP) Implementation Guide (JSIG)Experience developing, testing, and collecting artifacts for RMF packages and Bodies of Evidence (BoEs) across multiple systems.Experience performing authorized data transfers across multiple systems and classification levels.Preferred Qualifications:Experience supporting the DoW and DOECISSP, CGRC, CompTIA SecurityX, or a comparable advanced security certification.ISSO or ISSE experience within DOE, DoW, or the Intelligence Community.Experience applying DoW and IC cybersecurity practices to on-premises and cloud-native Kubernetes processing systems.Experience implementing and assessing DISA Security Technical Implementation Guides (STIGs) and configuration standards.Hands-on experience operating, maintaining, or assessing a cross-domain solution (CDS) from the National Cross Domain Strategy and Management Office (NCDSMO) Baseline List.Working knowledge of NCDSMO Raise the Bar (RTB) requirements, including lab-based and site-based assessments.Experience taking a CDS through a full assessment and authorization cycle, from initial package to ATO.Working knowledge of tools for audit reduction, vulnerability scanning, compliance checking, and malware analysis, such as Splunk, Tenable Nessus, Endpoint Security Solution (ESS), SCAP Compliance Checker (SCC), and STIG Viewer.Experience with Security Directives, Policies, Publications, and Regulations.Strong written and verbal communication skills, including working with cognizant security agencies, customers, and senior managers.Strong organizational skills and the ability to work independently with minimal guidance.Special Requirements:This position requires the ability to obtain and maintain a Sensitive Compartmented Information (SCI) clearance from the Department of Energy. As such, this position is a Workplace Substance Abuse (WSAP) testing designated position. WSAP positions require passing a pre-placement drug test and participation in an ongoing random drug testing program. In addition, due the SCI, you may also be subject to random polygraph testing. Visa sponsorship is not available for this position.About ORNL:As a U.S. Department of Energy (DOE) Office of Science national laboratory, ORNL has an impressive 80-year legacy of addressing the nation’s most pressing challenges. Our team is made up of over 7,000 dedicated and innovative individuals! Our goal is to create an environment where a variety of perspectives and backgrounds are valued, ensuring ORNL is known as a top choice for employment. These principles are essential for supporting our broader mission to drive scientific breakthroughs and translate them into solutions for energy, environmental, and security challenges facing the nation.ORNL offers competitive pay and benefits programs to attract and retain individuals who demonstrate exceptional work behaviors. The laboratory provides a range of employee benefits, including medical and retirement plans and flexible work hours, to support the well-being of you and your family. Employee amenities such as on-site fitness, banking, and cafeteria facilities are also available for added convenience.Other benefits include the following: Prescription Drug Plan, Dental Plan, Vision Plan, 401(k) Retirement Plan, Contributory Pension Plan, Life Insurance, Disability Benefits, Generous Vacation and Holidays, Parental Leave, Legal Insurance with Identity Theft Protection, Employee Assistance Plan, Flexible Spending Accounts, Health Savings Accounts, Wellness Programs, Educational Assistance, Relocation Assistance, and Employee Discounts.This position will remain open for a minimum of 5 days after which it will close when a qualified candidate is identified and/or hired.We accept Word (.doc, .docx), Adobe (unsecured .pdf), Rich Text Format (.rtf), and HTML (.htm, .html) up to 5MB in size. Resumes from third party vendors will not be accepted; these resumes will be deleted and the candidates submitted will not be considered for employment.If you have trouble applying for a position, please email View email address on click.appcast.io is an equal opportunity employer. All qualified applicants, including individuals with disabilities and protected veterans, are encouraged to apply. UT-Battelle is an E-Verify employer.