ISSO — Classified RMF & SIEM Security Lead

Oak Ridge National Laboratory; Oak Ridge (TN); On-site; USD 95,000 - 140,000; Full time

Benefits offered by this job

Medical and retirement plans

Flexible work hours

On-site fitness facilities

Relocation assistance

Job summary

Oak Ridge National Laboratory seeks an experienced Information Systems Security Officer (ISSO) to join the Information Assurance Group within the Field Intelligence Operations Division. The role requires a Top Secret clearance with access to Q and SCI and involves overseeing RMF-based security for classified environments across multiple facilities.

The ISSO will work with the ISSM to certify and accredit systems, implement STIGs, and manage security programs, dashboards, and audits.

Qualifications

• RMF knowledge and experience with RMF packages and BoEs.
• Ability to develop, review, and maintain SSPs and RMF artifacts.
• Strong communication skills interfacing with security agencies and stakeholders.

Responsibilities

• Lead continuous monitoring to keep RMF-compliant systems.
• Apply security patches and secure configurations per STIGs and NIST 800-53.
• Collaborate with ISSM on design, development, and accreditation of classified systems.
• Manage security tool environments (Splunk, SolarWinds) and build dashboards for real-time detection.
• Perform security incident investigations and document findings for corrective action.

Skills

RMF knowledge

NIST/CNSSI knowledge

Documentation & artifacts

Communication skills

Security incident response

Education

BS/BA in information technology or technical equivalent

Tools

Splunk

SolarWinds

STIGs

Job description

Oak Ridge National Laboratory seeks an experienced Information Systems Security Officer (ISSO) to join the Information Assurance Group within the Field Intelligence Operations Division. The role requires a Top Secret clearance with access to Q and SCI and involves overseeing RMF-based security for classified environments across multiple facilities.

The ISSO will work with the ISSM to certify and accredit systems, implement STIGs, and manage security programs, dashboards, and audits.