Hybrid Cyber Threat Architect & AI Security Engineer

Rolls-Royce; Indianapolis (IN); On-site; USD 99,000 - 160,000; Full time

Job summary

Rolls-Royce in Indianapolis, IN is seeking an Advanced Cyber Unit Analyst – AI Specialist to join a hybrid security operations and engineering team. You will be a core member of the CIRT, perform threat hunting, red teaming, and develop automation and AI-enabled security tooling.

You’ll implement MITRE ATT&CK-aligned playbooks, triage incidents, and pilot AI-powered solutions while safeguarding sensitive data in AI pipelines. US citizenship required.

Qualifications

• Associate’s degree in Cyber Security, Computer Science, or Technology with 4+ years of security ops, threat hunting, or incident response.
• Bachelor’s degree in Cyber Security, Computer Science or Technology with 2+ years in security ops, threat hunting, or incident response.
• Master’s of Science in Cyber Security, Computer Science or Technology, or PhD degree.
• US citizenship is required for consideration.

Responsibilities

• Own escalations through full lifecycle: triage, containment, eradication, recovery, and post-incident review.
• Lead and support major incident response efforts, coordinating across engineering, IT, legal, and management.
• Perform hypothesis-driven threat hunting and conduct red team exercises to validate detections.
• Build and maintain automation for alert triage, log collection, IOC enrichment, and response actions; develop SOAR playbooks and integrations.
• Evaluate, pilot, and operationalize AI/ML capabilities in security processes; monitor AI tooling and protect data in AI pipelines.

Skills

Threat hunting

Incident response

Security operations

Python scripting

PowerShell scripting

ML/AI security

Education

Associate degree

Bachelor's degree

Master's degree

PhD degree

Tools

Splunk

Sentinel

QRadar

Elastic

Defender for Endpoint

CrowdStrike

Carbon Black

Job description

Rolls-Royce in Indianapolis, IN is seeking an Advanced Cyber Unit Analyst – AI Specialist to join a hybrid security operations and engineering team. You will be a core member of the CIRT, perform threat hunting, red teaming, and develop automation and AI-enabled security tooling.

You’ll implement MITRE ATT&CK-aligned playbooks, triage incidents, and pilot AI-powered solutions while safeguarding sensitive data in AI pipelines. US citizenship required.