Cloud Security Analyst

ATB Financial; Calgary; Hybrid; CAD 110,000 - 160,000; Full time

Benefits offered by this job

Hybrid work arrangement

Professional development opportunities

Job summary

ATB Financial is hiring a Cloud Security Analyst to protect our GCP and AWS environments. You will strengthen controls, automate security tasks, and collaborate with engineering teams to reduce risk.

The role emphasizes hands-on security in a cloud-native environment with CSPM tooling and IaC practices. You’ll work in a hybrid setup with 1–2 days on-site per week and contribute to security investigations, threat detection, and security standardization across ATB’s cloud resources.

Qualifications

• Hands-on with securing GCP and AWS environments.
• IAM, networking, encryption, logging, vulnerability management fundamentals.
• Experience identifying, investigating, and remediating cloud security risks.
• Familiar with CSPM tools such as Wiz, AWS Security Hub, GuardDuty, or Security Command Center.
• Understanding of service accounts, IAM roles, least privilege, and privileged access.
• Scripting or automation with Python, PowerShell, Bash, or similar.
• IaC (Terraform) and modern CI/CD practices.
• Knowledge of Kubernetes security is a plus.
• Familiarity with CIS Benchmarks and the NIST CSF.
• Cloud security certifications are assets.

Responsibilities

• Monitor security posture of ATB's GCP and AWS environments; identify vulnerabilities and misconfigurations.
• Operate CSPM and cloud-native security tools to improve visibility and reduce risk.
• Investigate cloud security findings; prioritize remediation based on risk.
• Partner with cloud engineering and infrastructure teams to remediate issues.
• Assess IAM, service accounts, permissions, and privileged access.
• Develop scripts and integrations to improve monitoring, testing, and remediation.
• Integrate automated security checks into CI/CD pipelines and IaC workflows.
• Review network configurations, storage, encryption, and data protection controls.
• Support security investigations involving cloud environments and potential compromises.
• Evaluate emerging threats and technologies through hands-on testing.
• Maintain security standards, guidance, and reusable controls for engineering teams.
• Track remediation progress and identify recurring issues for scale improvements.

Skills

GCP security

AWS security

IAM fundamentals

CSPM tooling

Automation scripting

Terraform IaC

CI/CD security

Kubernetes security

Education

Bachelor's or higher in CS/IT/Cybersecurity

Tools

Terraform

Wiz

AWS Security Hub

GuardDuty

Security Command Center

Job description

At ATB, we exist to make it possible for our clients, team members and communities. Our purpose is more than aspirational. It's a real commitment we live every day through our values (what we call the ATB ID).

Life at ATB is about more than work. In fact, we're consistently recognized as one of Canada's top employers thanks to our high-care, high-performance culture, upheld by the three commitments we make to our team members:

Impact in action: No matter where you are in the organization, you're empowered to make an impact in the lives of our clients and communities.

Thrive together: We want you—the unique, authentic you—to feel safe and celebrated at work. We're on a continuous journey to build the most flexible and inclusive programs.

Ready for tomorrow: We want to enable your success through interesting and challenging work, performance enablement, and learning and development.

About the Role

This position has a hybrid work arrangement. On average, this means 1-2 day(s) on-site per week. Please note that this is subject to change due to business priorities.

As ATB's next Cloud Security Analyst, you'll help protect our cloud environments by identifying security risks, strengthening controls, and working with engineering teams to resolve vulnerabilities and misconfigurations. You'll work primarily across Google Cloud Platform (GCP) and Amazon Web Services (AWS), using modern security tools, automation, and cloud-native capabilities to improve visibility and reduce risk. This is a hands-on technical role where you'll help make cloud security more consistent, proactive, and integrated into how ATB builds and operates technology.

Accountabilities

• Monitor and assess the security posture of ATB's GCP and AWS environments, identifying vulnerabilities, misconfigurations, and potential attack paths.
• Operate and improve cloud security tools, including cloud security posture management (CSPM) and cloud-native security capabilities.
• Investigate cloud security findings, validate their potential impact, and prioritize remediation based on actual risk to ATB.
• Partner with cloud engineering, application development teams, and infrastructure teams to remediate security issues and strengthen cloud configurations.
• Assess cloud identity and access management (IAM), service accounts, permissions, and privileged access to identify and reduce excessive access.
• Develop scripts, integrations, and automation to improve cloud security monitoring, testing, reporting, and remediation.
• Integrate automated security checks into CI/CD pipelines and infrastructure-as-code workflows to identify security issues earlier in development.
• Review cloud network configurations, storage, encryption, and data protection controls to identify potential exposure.
• Support security investigations involving cloud environments, including suspicious activity, configuration changes, and potential compromise.
• Evaluate emerging cloud security threats, capabilities, and technologies through hands-on testing and technical analysis.
• Develop and maintain security standards, technical guidance, and reusable controls that help engineering teams deploy cloud resources securely.
• Track remediation progress, identify recurring security issues, and recommend improvements that reduce risk at scale.

Skills, Experience & Requirements

• Hands-on experience securing cloud environments, particularly Google Cloud Platform (GCP) and Amazon Web Services (AWS).
• Strong understanding of cloud security fundamentals, including IAM, networking, encryption, logging, vulnerability management, and secure configuration.
• Experience identifying, investigating, and remediating cloud security risks and misconfigurations.
• Familiarity with cloud security posture management (CSPM) or cloud-native security tools such as Wiz, AWS Security Hub, Amazon GuardDuty, or Google Security Command Center.
• Understanding of cloud identity concepts, including service accounts, IAM roles, workload identities, least privilege, and privileged access.
• Experience with scripting or automation using Python, PowerShell, Bash, or similar technologies.
• Familiarity with infrastructure-as-code technologies such as Terraform and modern CI/CD development practices.
• Understanding of container security, Kubernetes, and cloud-native application architectures is considered an asset.
• Knowledge of cloud security frameworks and industry best practices, including CIS Benchmarks and the NIST Cybersecurity Framework.
• Experience working with security logging, monitoring, threat detection, or incident investigation in cloud environments is considered an asset.
• Strong analytical and troubleshooting skills, with the ability to investigate complex technical issues and recommend practical solutions.
• Ability to work collaboratively with engineering and development teams to implement security improvements.
• Relevant cloud or security certifications, such as Google Professional Cloud Security Engineer, AWS Certified Security – Specialty, or equivalent, are considered assets.
• A diploma or degree in Computer Science, Information Technology, Cybersecurity, or equivalent practical experience.

Don't meet all the requirements on the list?
A resume only goes so far in expressing who you are and the unique perspectives you bring. If you believe your skills and experience align with the role—but you might not check all the boxes,we want to hear from you. We encourage candidates from all work backgrounds, equity-seeking communities and experience levels to apply. If you're seeking a career where your drive, perspective and growth are celebrated, we want to hear from you.

We're dedicated to building a workforce reflective of those within our communities, and a culture where our team members are equipped with what they need to succeed—their way. Part of creating an inclusive workplace is recognizing our role in advancing Truth and Reconciliation. We are committed to meeting and exceeding the standards set out in the Partnership Accreditation in Indigenous Relationsprogram created by the Canadian Council for Aboriginal Business.

What happens next?
If you are shortlisted, you'll hear from us after the posting closes. Check out our How We Hire page to learn more about our hiring process. If you need any accommodations throughout this process, please let us know at [e-mail]

Stay in touch
We're excited that you're interested in a career with ATB. Follow us on LinkedIn, Facebook and Instagram to learn more about what our team is up to.