Advanced Cyber Unit Analyst in Bristol

At Rolls‑Royce we are proud to be a business that has truly helped to shape the modern world and are committed to always being a force for progress; powering, protecting, and connecting people everywhere.

An exciting opportunity has arisen for an Advanced Cyber Unit Analyst to join the Rolls‑Royce Advanced Cyber Unit (ACU). The ACU is tasked to identify threat actors attacking (or planning to attack) the organisation and quelling the problem at the earliest possible juncture. They are tasked with ensuring that future attacks from the same threat agent are unsuccessful. The team’s remit is the detection, disruption, and eradication of threat actors from Rolls‑Royce.

What You Will Be Doing

• Evaluating logs and alerts from a variety of different data sources (IDS/IPS, Firewall, Proxies, Anti‑Virus, SIEMSs) across multiple platforms and escalating/explaining severe security incidents verbally and in writing.
• Coaching major security incidents through all phases of the incident response lifecycle from identification through to closure.
• Identifying/developing tooling for use during cyber threat hunts, investigations, and incidents.
• Assisting Rolls‑Royce users and key stakeholders with security related issues and advice.
• Responding to technical security questions and concerns from the business.
• Conducting research on emerging security threats and potential customer impact.
• Ensuring all operating environments including manufacturing, on‑premises, and cloud segments of the network.

Position Qualifications

• Bachelor’s degree in computer science, information technology or data science OR 2+ years of information technology security experience.
• A passion for IT, cyber security, learning, and knowledge sharing combined with an evaluative and curious mind‑set to carry out investigations.
• Advanced understanding of cyber security and detection techniques.
• Experience of network anomaly detection using traffic evaluation or network intruder detection systems.
• Understanding of the cyber kill chain in relation to Advanced Persistent Threats (APTs).
• Demonstrable experience of security related incidents.
• A flexible approach to working given the reactive nature of incident response. Evening and weekend working may be required during periods of major activity.
• Should be UK Citizen and able to obtain security clearance; this role is subject to Full UK Security Clearance.

Regional Benefits

• Work in a safety‑first environment where doing the right thing and keeping it simple are core principles.
• Join a culture that values making a real difference through your work.
• Develop your career as a mid‑career professional blending technical expertise with strong personal qualities.
• Thrive in a role that encourages integrity, accountability, resilience, and curiosity.
• Collaborate and build relationships in a team‑focused environment while also working independently.
• Take initiative, lead, and make smart decisions with confidence and support.
• Grow through continuous learning, openness to improvement, and exposure to challenging opportunities.

Our vision is to ensure that the excellence and ingenuity that shaped our history continues into our future. Our multi‑year transformation programme aims to turn Rolls‑Royce into a high‑performing, competitive, resilient, and growing company. Join us, and it can be your future vision too. Rolls‑Royce are committed to being a respectful, inclusive, and non‑discriminatory workplace where individuality is valued, diverse perspectives fuel innovation, and everyone can thrive.