Advanced Cyber Unit Analyst – AI Specialist

Rolls-Royce Corporation; Indianapolis (IN); Hybrid; USD 99,000 - 160,000; Full time

Benefits offered by this job

Total Rewards package

Health benefits

Tuition reimbursement

Paid time off

Job summary

Rolls-Royce Corporation seeks an Advanced Cyber Unit Analyst – AI Specialist in Indianapolis, IN. The role blends security operations with engineering, joining our CIRT to triage escalations, hunt threats, and build proactive tooling.

The position emphasizes AI/ML-enabled security, guardrails, and collaboration with engineering to secure AI pipelines. You’ll work on incident response, threat hunting, automation, and red team activities, requiring strong SIEM/EDR experience and a US‑citizenship

Qualifications

• Bachelor's/Master's/PhD in cyber security, CS, or technology with relevant experience.
• US citizenship is required for consideration.
• Hands-on SIEM/EDR experience and incident response background.

Responsibilities

• Incident Response & CIRT operations across full lifecycle.
• Threat hunting and red team exercises to test coverage.
• Security automation and SOAR playbooks for efficient triage.
• AI/ML integration to prioritize alerts and detect anomalies.

Skills

Python scripting

Threat hunting

Incident response

Red team exercises

AI/ML security

Education

Associate’s Degree in Cyber Security or CS

Bachelor’s Degree in Cyber Security or CS

Master’s/PhD in relevant field

Tools

Splunk

Sentinel

QRadar

Elastic

Defender for Endpoint

CrowdStrike

Carbon Black

Job description

Job Title

Advanced Cyber Unit Analyst – AI Specialist

Working Pattern

Fulltime

Working Location

Indianapolis, IN

Why Rolls-Royce?

At Rolls-Royce we are proud to be a business that has truly helped to shape the modern world and are committed to always being a force for progress; powering, protecting and connecting people everywhere. By joining Rolls-Royce, you’ll have the opportunity to create world-class power and propulsion solutions, pushing your problem-solving and ingenuity, to deliver real impact that puts safety first. You’ll be given responsibility and the opportunity to grow in our high-performance culture. This is Infinite Potential. And it’s your chance to really shine and contribute to one of the world’s most recognized brands and a beacon for engineering excellence.

Position Summary

An Exciting opportunity for an Advanced Cyber Unit Analyst has arisen who is as comfortable chasing an active threat as they are building the tooling that catches the next one. This is a hybrid security operations and engineering role: you will be a full member of our Computer Incident Response Team (CIRT), receiving and triaging escalations from the SOC, then stepping into proactive threat hunting and red teaming activities during periods without major incidents.

What you will be doing:

• Incident Response & CIRT Operations (25%) Serve as a core member of the CIRT, receiving escalations from the SOC and owning them through full lifecycle management — triage, containment, eradication, recovery, and post-incident review Lead and support major incident response efforts, coordinating with engineering, IT, legal, and management and develop and maintain incident response playbooks aligned to MITRE ATT&CK and NIST frameworks Conduct post-incident reviews and drive actionable remediation
• Threat Hunting & Red Teaming (25%) Perform hypothesis-driven threat hunting during periods of low incident volume, targeting our most likely adversary TTPs Execute internal red team exercises and adversary emulation (initial access, lateral movement, persistence, exfiltration) to validate our detection coverage
• Security Automation (25%) Build and maintain automation for alert triage, log collection, IOC enrichment, and response actions Develop SOAR playbooks, custom integrations, and scripting (Python, PowerShell, Bash) to improve efficiency and automate repetitive CIRT tasks (asset lookup, isolation, credential resets, report generation) Integrate third-party tools and APIs across the security stack (SIEM, EDR, TI, ticketing)
• AI in Cyber Security (25%) Evaluate, implement, and operationalize AI/ML capabilities across our security processes (e.g., alert prioritization, anomaly detection, summarization, LLM-assisted triage) Pilot and productionize AI-powered tooling, establishing guardrails, monitoring, and feedback loops and work with engineering to secure AI/LLM-based security solutions and protect sensitive data in AI pipelines Track emerging AI security trends (including AI-assisted attacks and AI defense techniques) and present findings to the team

Basic Requirements

• Associate’s Degree in Cyber Security, Computer Science, or Technology and 4+ years of experience in security operations, threat hunting, incident response or closely related security role OR Bachelor Degree in Cyber Security, Computer Science or Technology and 2+ years of experience in security operations, threat hunting, incident response or closely related security role OR Master’s of Science in Cyber Security, Computer Science or Technology OR PhD degree
• In order to be considered for this role, you must be a US citizen

Preferred Requirements

• Hands-on experience with SIEM platforms (e.g., Splunk, Sentinel, QRadar, Elastic) and EDR (e.g., Defender for Endpoint, CrowdStrike, Carbon Black)
• Strong understanding of network protocols, Active Directory, and common attack techniques (MITRE ATT&CK fluency)
• Proficiency in at least one scripting language (Python preferred)
• Experience triaging and responding to real-world security incidents
• Experience implementing or operating ML/AI-based security tools
• Familiarity with threat intelligence platforms and community (e.g., MISP, OTX)
• Cloud security experience (AWS, Azure, or GCP)

Certifications

• GCIH, GCTI/GCDA, OSCP, BTL1, CRTO, CySA+, or equivalent

Benefits

• Rolls-Royce provides a comprehensive and competitive Total Rewards package that includes base pay and a discretionary bonus plan.
• Eligible employees may have the opportunity to enroll in other benefits, including health, dental, vision, disability, life and accidental death & dismemberment insurance; a flexible spending account; a health savings account; a 401(k) retirement savings plan with a company match; Employee Assistance Program; Paid Time Off; certain paid holidays; paid parental and family care leave; tuition reimbursement; and a long-term incentive plan.

Rolls-Royce pioneers cutting-edge technologies that deliver the cleanest, safest and most competitive solutions to our planet’s vital power needs.

Equal Opportunity Employer

Rolls-Royce is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to any protected characteristics. We are committed to providing a respectful and non-discriminatory workplace where individuality is valued and everyone can thrive.

Closing Date

November 18, 2026

Job Category: Information Technology

Job Posting Date 10 Nov 2026; 00:11

Pay Range

Pay ranges for remote employees are based on the state where the employee resides and may vary from the posted range.

$98,566 - $160,169-Annually

Location

Indianapolis, IN