Cloud Security Analyst

At ATB, we exist to make it possible for our clients, team members and communities. Our purpose is more than aspirational. It's a real commitment we live every day through our values (what we call the ATB ID).Life at ATB is about more than work. In fact, we’re consistently recognized as one of Canada's top employers thanks to our high-care, high-performance culture, upheld by the three commitments we make to our team members:Impact in action: No matter where you are in the organization, you're empowered to make an impact in the lives of our clients and communities.Thrive together: We want you—the unique, authentic you—to feel safe and celebrated at work. We're on a continuous journey to build the most flexible and inclusive programs.Ready for tomorrow: We want to enable your success through interesting and challenging work, performance enablement, and learning and development.About the Role
This position has a hybrid work arrangement. On average, this means 1-2 day(s) on-site per week. Please note that this is subject to change due to business priorities.As ATB’s next Cloud Security Analyst, you'll help protect our cloud environments by identifying security risks, strengthening controls, and working with engineering teams to resolve vulnerabilities and misconfigurations. You'll work primarily across Google Cloud Platform (GCP) and Amazon Web Services (AWS), using modern security tools, automation, and cloud-native capabilities to improve visibility and reduce risk. This is a hands-on technical role where you'll help make cloud security more consistent, proactive, and integrated into how ATB builds and operates technology.Accountabilities
Monitor and assess the security posture of ATB's GCP and AWS environments, identifying vulnerabilities, misconfigurations, and potential attack paths.Operate and improve cloud security tools, including cloud security posture management (CSPM) and cloud-native security capabilities.Investigate cloud security findings, validate their potential impact, and prioritize remediation based on actual risk to ATB.Partner with cloud engineering, application development teams, and infrastructure teams to remediate security issues and strengthen cloud configurations.Assess cloud identity and access management (IAM), service accounts, permissions, and privileged access to identify and reduce excessive access.Develop scripts, integrations, and automation to improve cloud security monitoring, testing, reporting, and remediation.Integrate automated security checks into CI/CD pipelines and infrastructure-as-code workflows to identify security issues earlier in development.Review cloud network configurations, storage, encryption, and data protection controls to identify potential exposure.Support security investigations involving cloud environments, including suspicious activity, configuration changes, and potential compromise.Evaluate emerging cloud security threats, capabilities, and technologies through hands-on testing and technical analysis.Develop and maintain security standards, technical guidance, and reusable controls that help engineering teams deploy cloud resources securely.Track remediation progress, identify recurring security issues, and recommend improvements that reduce risk at scale.Skills, Experience & Requirements
Hands-on experience securing cloud environments, particularly Google Cloud Platform (GCP) and Amazon Web Services (AWS).Strong understanding of cloud security fundamentals, including IAM, networking, encryption, logging, vulnerability management, and secure configuration.Experience identifying, investigating, and remediating cloud security risks and misconfigurations.Familiarity with cloud security posture management (CSPM) or cloud-native security tools such as Wiz, AWS Security Hub, Amazon GuardDuty, or Google Security Command Center.Understanding of cloud identity concepts, including service accounts, IAM roles, workload identities, least privilege, and privileged access.Experience with scripting or automation using Python, PowerShell, Bash, or similar technologies.Familiarity with infrastructure-as-code technologies such as Terraform and modern CI/CD development practices.Understanding of container security, Kubernetes, and cloud-native application architectures is considered an asset.Knowledge of cloud security frameworks and industry best practices, including CIS Benchmarks and the NIST Cybersecurity Framework.Experience working with security logging, monitoring, threat detection, or incident investigation in cloud environments is considered an asset.Strong analytical and troubleshooting skills, with the ability to investigate complex technical issues and recommend practical solutions.Ability to work collaboratively with engineering and development teams to implement security improvements.Relevant cloud or security certifications, such as Google Professional Cloud Security Engineer, AWS Certified Security – Specialty, or equivalent, are considered assets.A diploma or degree in Computer Science, Information Technology, Cybersecurity, or equivalent practical experience.We’re dedicated to building a workforce reflective of those within our communities, and a culture where our team members are equipped with what they need to succeed—their way. Part of creating an inclusive workplace is recognizing our role in advancing Truth and Reconciliation. We are committed to meeting and exceeding the standards set out in the Partnership Accreditation in Indigenous Relations program created by the Canadian Council for Aboriginal Business.What happens next? If you are shortlisted, you’ll hear from us after the posting closes. Check out our How We Hire page to learn more about our hiring process. If you need any accommodations throughout this process, please let us know at View email address on ca.hrm.tc
#J-18808-Ljbffr