At ATB, we exist to make it possible for our clients, team members and communities. In fact, we're consistently recognized as one of Canada's top employers thanks to our high-care, high-performance culture, upheld by the three commitments we make to our team members: No matter where you are in the organization, you're empowered to make an impact in the lives of our clients and communities. We're on a continuous journey to build the most versatile and inclusive programs.

We want to enable your success through interesting and challenging work, performance enablement, and learning and development. 1-2 day(s) on-site per week. As ATB's next Cloud Security Analyst, you'll help protect our cloud environments by identifying security risks, strengthening controls, and working with engineering teams to resolve vulnerabilities and misconfigurations. You'll work primarily across Google Cloud Platform (GCP) and Amazon Web Services (AWS), using modern security tools, automation, and cloud-native capabilities to improve visibility and reduce risk.

This is a hands-on technical role where you'll help make cloud security more consistent, proactive, and integrated into how ATB builds and operates technology. Monitor and assess the security posture of ATB's GCP and AWS environments, identifying vulnerabilities, misconfigurations, and potential attack paths. Operate and improve cloud security tools, including cloud security posture management (CSPM) and cloud-native security capabilities.

Investigate cloud security findings, validate their potential impact, and prioritize remediation based on actual risk to ATB. Partner with cloud engineering, application development teams, and infrastructure teams to remediate security issues and strengthen cloud configurations. Assess cloud identity and access management (IAM), service accounts, permissions, and privileged access to identify and reduce excessive access.





Develop scripts, integrations, and automation to improve cloud security monitoring, testing, reporting, and remediation. Integrate automated security checks into CI/CD pipelines and infrastructure-as-code workflows to identify security issues earlier in development. Review cloud network configurations, storage, encryption, and data protection controls to identify potential exposure.

Support security investigations involving cloud environments, including suspicious activity, configuration changes, and potential compromise. Evaluate emerging cloud security threats, capabilities, and technologies through hands-on testing and technical analysis. Develop and maintain security standards, technical guidance, and reusable controls that help engineering teams deploy cloud resources securely.

Track remediation progress, identify recurring security issues, and recommend improvements that reduce risk at scale. Hands-on experience securing cloud environments, particularly Google Cloud Platform (GCP) and Amazon Web Services (AWS). Strong understanding of cloud security fundamentals, including IAM, networking, encryption, logging, vulnerability management, and secure configuration.

Experience identifying, investigating, and remediating cloud security risks and misconfigurations. Familiarity with cloud security posture management (CSPM) or cloud-native security tools such as Wiz, AWS Security Hub, Amazon GuardDuty, or Google Security Command Center. Understanding of cloud identity concepts,



including service accounts, IAM roles, workload identities, least privilege, and privileged access.

Experience with scripting or automation using Python, PowerShell, Bash, or similar technologies. Understanding of container security, Kubernetes, and cloud-native application architectures is considered an asset. Knowledge of cloud security frameworks and industry best practices, including CIS Benchmarks and the NIST Cybersecurity Framework.

Experience working with security logging, monitoring, threat detection, or incident investigation in cloud environments is considered an asset. Strong analytical and troubleshooting skills, with the ability to investigate complex technical issues and recommend practical solutions. Ability to work collaboratively with engineering and development teams to implement security improvements.

Relevant cloud or security certifications, such as Google Professional Cloud Security Engineer, AWS Certified Security – Specialty, or equivalent, are considered assets. A diploma or degree in Computer Science, Information Technology, Cybersecurity, or equivalent practical experience. We encourage candidates from all work backgrounds, equity-seeking communities and experience levels to apply.

We're dedicated to building a workforce reflective of those within our communities, and a culture where our team members are equipped with what they need to succeed—their way. Part of creating an inclusive workplace is recognizing our role in advancing Truth and Reconciliation. We are committed to meeting and exceeding the standards set out in the Partnership Accreditation in Indigenous Relationsprogram created by the Canadian Council for Aboriginal Business.

Follow us on LinkedIn, Facebook and Instagram to learn more about what our team is up to. #

📌 Cloud Security Analyst (Winnipeg)
🏢 ATB Financial
📍 Winnipeg