Cloud Security Analyst

ATB Financial; Edmonton; Hybrid; CAD 90,000 - 130,000; Full time

Job summary

ATB Financial in Canada is hiring a Cloud Security Analyst to help protect our cloud environments by identifying risks, strengthening controls, and partnering with engineering teams to remediate issues across GCP and AWS. This hands-on role emphasizes security automation, CI/CD integration, and cloud-native capabilities to improve visibility and reduce risk.

A hybrid work arrangement with 1-2 on-site days per week is provided.

Qualifications

• Hands-on experience securing cloud environments, especially GCP and AWS.
• Strong understanding of IAM, networking, encryption, logging, vulnerability management, and secure configuration.
• Experience identifying, investigating, and remediating cloud security risks.
• Familiarity with CSPM tools or cloud-native security tools such as Wiz, AWS Security Hub, Amazon GuardDuty, or Google Security Command Center.
• Understanding of cloud identity concepts, including service accounts, IAM roles, least privilege, and privileged access.
• Experience with scripting or automation using Python, PowerShell, Bash.
• Familiarity with Terraform and CI/CD practices.
• Knowledge of CIS Benchmarks and NIST Cybersecurity Framework.

Responsibilities

• Monitor and improve security of ATB's GCP and AWS environments.
• Operate CSPM and cloud-native security capabilities.
• Investigate findings, assess impact, and prioritize remediation.
• Collaborate with cloud engineering, application development, and infrastructure teams.
• Assess IAM, service accounts, and privileged access to reduce excessive access.
• Develop scripts and automation for monitoring, testing, reporting, and remediation.
• Integrate security checks into CI/CD and IaC workflows.
• Review network configurations, storage, encryption, and data protection controls.
• Support security investigations involving cloud environments.
• Evaluate emerging cloud security threats and technologies.
• Develop and maintain security standards and reusable controls.
• Track remediation progress and identify recurring issues.

Skills

Cloud security fundamentals

IAM

Networking

Encryption

Logging

Vulnerability management

Secure configuration

Scripting

Python

PowerShell

Bash

Terraform

CI/CD

Cloud-native architectures

Collaboration with engineering

Analytical troubleshooting

Security certifications

Education

Diploma or degree in Computer Science, Information Technology, Cybersecurity, or equivalent

Tools

GCP

AWS

Wiz

AWS Security Hub

Amazon GuardDuty

Google Security Command Center

Job description

At ATB, we exist to make it possible for our clients, team members and communities. Our purpose is more than aspirational. It's a real commitment we live every day through our values (what we call the ATB ID).

Life at ATB is about more than work. In fact, we’re consistently recognized as one Canada's top employers thanks to our high-care, high-performance culture, upheld by the three commitments we make to our team members:

Impact in action: No matter where you are in the organization, you're empowered to make an impact in the lives of our clients and communities.

Thrive together: We want you—the unique, authentic you—to feel safe and celebrated at work. We're on a continuous journey to build the most flexible and inclusive programs.

Ready for tomorrow: We want to enable your success through interesting and challenging work, performance enablement, and learning and development.

About the Role

This position has a hybrid work arrangement. On average, this means 1-2 day(s) on-site per week. Please note that this is subject to change due to business priorities.

As ATB’s next Cloud Security Analyst, you'll help protect our cloud environments by identifying security risks, strengthening controls, and working with engineering teams to resolve vulnerabilities and misconfigurations. You'll work primarily across Google Cloud Platform (GCP) and Amazon Web Services (AWS), using modern security tools, automation, and cloud-native capabilities to improve visibility and reduce risk. This is a hands-on technical role where you'll help make cloud security more consistent, proactive, and integrated into how ATB builds and operates technology.

Accountabilities

• Monitor and assess the security posture of ATB's GCP and AWS environments, identifying vulnerabilities, misconfigurations, and potential attack paths.
• Operate and improve cloud security tools, including cloud security posture management (CSPM) and cloud-native security capabilities.
• Investigate cloud security findings, validate their potential impact, and prioritize remediation based on actual risk to ATB.
• Partner with cloud engineering, application development teams, and infrastructure teams to remediate security issues and strengthen cloud configurations.
• Assess cloud identity and access management (IAM), service accounts, permissions, and privileged access to identify and reduce excessive access.
• Develop scripts, integrations, and automation to improve cloud security monitoring, testing, reporting, and remediation.
• Integrate automated security checks into CI/CD pipelines and infrastructure-as-code workflows to identify security issues earlier in development.
• Review cloud network configurations, storage, encryption, and data protection controls to identify potential exposure.
• Support security investigations involving cloud environments, including suspicious activity, configuration changes, and potential compromise.
• Evaluate emerging cloud security threats, capabilities, and technologies through hands‑on testing and technical analysis.
• Develop and maintain security standards, technical guidance, and reusable controls that help engineering teams deploy cloud resources securely.
• Track remediation progress, identify recurring security issues, and recommend improvements that reduce risk at scale.

Skills, Experience & Requirements

• Hands‑on experience securing cloud environments, particularly Google Cloud Platform (GCP) and Amazon Web Services (AWS).
• Strong understanding of cloud security fundamentals, including IAM, networking, encryption, logging, vulnerability management, and secure configuration.
• Experience identifying, investigating, and remediating cloud security risks and misconfigurations.
• Familiarity with cloud security posture management (CSPM) or cloud-native security tools such as Wiz, AWS Security Hub, Amazon GuardDuty, or Google Security Command Center.
• Understanding of cloud identity concepts, including service accounts, IAM roles, workload identities, least privilege, and privileged access.
• Experience with scripting or automation using Python, PowerShell, Bash, or similar technologies.
• Familiarity with infrastructure-as-code technologies such as Terraform and modern CI/CD development practices.
• Understanding of container security, Kubernetes, and cloud-native application architectures is considered an asset.
• Knowledge of cloud security frameworks and industry best practices, including CIS Benchmarks and the NIST Cybersecurity Framework.
• Experience working with security logging, monitoring, threat detection, or incident investigation in cloud environments is considered an asset.
• Strong analytical and troubleshooting skills, with the ability to investigate complex technical issues and recommend practical solutions.
• Ability to work collaboratively with engineering and development teams to implement security improvements.
• Relevant cloud or security certifications, such as Google Professional Cloud Security Engineer, AWS Certified Security – Specialty, or equivalent, are considered assets.
• A diploma or degree in Computer Science, Information Technology, Cybersecurity, or equivalent practical experience.

Don’t meet all the requirements on the list?
A resume only goes so far in expressing who you are and the unique perspectives you bring. If you believe your skills and experience align with the role—but you might not check all the boxes,we want to hear from you. We encourage candidates from all work backgrounds, equity-seeking communities and experience levels to apply. If you’re seeking a career where your drive, perspective and growth are celebrated, we want to hear from you.

We’re dedicated to building a workforce reflective of those within our communities, and a culture where our team members are equipped with what they need to succeed—their way. Part of creating an inclusive workplace is recognizing our role in advancing Truth and Reconciliation. We are committed to meeting and exceeding the standards set out in the Partnership Accreditation in Indigenous Relations program created by the Canadian Council for Aboriginal Business.

What happens next?
If you are shortlisted, you’ll hear from us after the posting closes. Check out our How We Hire page to learn more about our hiring process. If you need any accommodations throughout this process, please let us know at [e-mail]

Stay in touch
We’re excited that you’re interested in a career with ATB. Follow us on LinkedIn, Facebook and Instagram to learn more about what our team is up to.