Advanced Cyber Unit Analyst - AI Specialist

rollsroyce; Indianapolis (IN); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Relocation assistance

Job summary

Rolls-Royce is seeking an Advanced Cyber Unit Analyst with a strong background in security operations, threat hunting, and incident response. You’ll operate within the CIRT, triaging escalations from the SOC, and also perform proactive threat hunting and red teaming when idle.

The role blends security engineering with hands-on investigations. The position emphasizes building automation, SOAR playbooks, and AI-enabled security tooling, complemented by collaboration with engineering, IT, and legal

Qualifications

• Associate's or higher in cyber security, CS or technology with 4+ years in security operations or related roles.
• Alternatively, a Master’s or PhD with relevant security experience may be considered.
• You must be a US citizen to be eligible.

Responsibilities

• Serve as core CIRT member, triage, contain, eradicate, recover, and review incidents.
• Lead major incident responses and develop MITRE ATT&CK/NIST-aligned playbooks.
• Perform threat hunting and red team exercises to test detections.
• Develop automation, SOAR playbooks, and integrations across security stack.

Skills

Threat hunting

Incident response

Automation scripting

AI/ML security

Education

Bachelor's degree in Cyber Security/CS/Technology

Associate's degree in Cyber Security/CS/Technology

Master's degree in Cyber Security/CS/Technology

PhD degree

Tools

Splunk

Sentinel

QRadar

Elastic

Defender for Endpoint

CrowdStrike

Carbon Black

Job description

Job Title: Advanced Cyber Unit Analyst - AI Specialist

Working Pattern: Fulltime

Working Location: Indianapolis, IN

Relocation assistance will be provided if applicable.

Why Rolls-Royce?

At Rolls-Royce we are proud to be a business that has truly helped to shape the modern world and are committed to always being a force for progress; powering, protecting and connecting people everywhere.

By joining Rolls-Royce, you'll have the opportunity to create world-class power and propulsion solutions, pushing your problem-solving and ingenuity, to deliver real impact that puts safety first.

You’ll be given responsibility and the opportunity to grow in our high-performance culture. This is Infinite Potential . And it's your chance to really shine and contribute to one of the world's most recognized brands and a beacon for engineering excellence.

Position Summary

An Exciting opportunity for an Advanced Cyber Unit Analyst has arisen who is as comfortable chasing an active threat as they are building the tooling that catches the next one. This is a hybrid security operations and engineering role: you will be a full member of our Computer Incident Response Team (CIRT), receiving and triaging escalations from the SOC, then stepping into proactive threat hunting and red teaming activities during periods without major incidents.

What you will be doing:

1. Incident Response & CIRT Operations (25%) Serve as a core member of the CIRT, receiving escalations from the SOC and owning them through full lifecycle management - triage, containment, eradication, recovery, and post-incident review Lead and support major incident response efforts, coordinating with engineering, IT, legal, and management and develop and maintain incident response playbooks aligned to MITRE ATT&CK and NIST frameworks Conduct post-incident reviews and drive actionable remediation.

2. Threat Hunting & Red Teaming (25%) Perform hypothesis-driven threat hunting during periods of low incident volume, targeting our most likely adversary TTPs Execute internal red team exercises and adversary emulation (initial access, lateral movement, persistence, exfiltration) to validate our detection coverage.

3. Security Automation (25%) Build and maintain automation for alert triage, log collection, IOC enrichment, and response actions Develop SOAR playbooks, custom integrations, and scripting (Python, PowerShell, Bash) to improve efficiency and automate repetitive CIRT tasks (asset lookup, isolation, credential resets, report generation) Integrate third-party tools and APIs across the security stack (SIEM, EDR, TI, ticketing).

4. AI in Cyber Security (25%) Evaluate, implement, and operationalize AI/ML capabilities across our security processes (e.g., alert prioritization, anomaly detection, summarization, LLM-assisted triage) Pilot and productionize AI-powered tooling, establishing guardrails, monitoring, and feedback loops and work with engineering to secure AI/LLM-based security solutions and protect sensitive data in AI pipelines Track emerging AI security trends (including AI-assisted attacks and AI defense techniques) and present findings to the team.

Basic Requirements:

• Associate's Degree in Cyber Security, Computer Science, or Technology and 4+ years of experience in security operations, threat hunting, incident response or closely related security role OR
• Bachelor Degree in Cyber Security, Computer Science or Technology and 2+ years of experience in security operations, threat hunting, incident response or closely related security role OR
• Master's of Science in Cyber Security, Computer Science or Technology OR
• PhD degree
• In order to be considered for this role, you must be a US citizen

Preferred Requirements:

• Hands-on experience with SIEM platforms (e.g., Splunk, Sentinel, QRadar, Elastic) and EDR (e.g., Defender for Endpoint, CrowdStrike, Carbon Black)
• Strong understanding of network protocols, Active Directory, and common attack techniques (MITRE ATT&CK fluency)
• Proficiency in at least one scripting language (Python preferred)
• Experience triaging and responding to real-world security incidents
• Experience implementing or operating ML/AI-based security tools
• Familiarity with threat intelligence platforms and community (e.g., MISP, OTX)
• Cloud security experience (AWS, Azure, or GCP)
• Certifications: GCIH, GCTI/GCDA, OSCP, BTL1, CRTO, CySA+, or equivalent

Our vision

Our vision is to ensure that the quality and dynamism that shaped our history continues into our future. It's a bold pursuit, and we never stop striving to go further, faster, and better. We lead progress, creating the technologies that move us forward. If you're driven to grow, to learn, and to make a lasting difference, this is where you belong.

Equal Opportunity

Rolls-Royce is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to any protected characteristics. We are committed to providing a respectful and non-discriminatory workplace where indiv