Incident Response Security Analyst (12-month term)
ATB
At ATB, we exist to make it possible for our clients, team members and communities. Our purpose is more than aspirational. It's a real commitment we live every day through our values (what we call the ATB ID).
Life at ATB is about more than work. In fact, we’re consistently recognized as one of Canada's top employers thanks to our high-care, high-performance culture, upheld by the three commitments we make to our team members:
Impact in action: No matter where you are in the organization, you're empowered to make an impact in the lives of our clients and communities.
Thrive together: We want you—the unique, authentic you—to feel safe and celebrated at work. We're on a continuous journey to build the most flexible and inclusive programs.
Ready for tomorrow: We want to enable your success through interesting and challenging work, performance enablement, and learning and development.
About the role
Please note: This is a temporary 12 month term opportunity, with potential for extension.
This position has a hybrid work arrangement. On average, this means 1 days on-site per week. Please note that this is subject to change due to business priorities.
As ATB’s next Incident Response Security Analyst, you will be part of a team reporting to the Managing Director Security Operations and Threat Intelligence and be responsible for handling cyber incident response activities. This can involve after hours and on call availability. The role will include responding to “Confirmation of Exposure” exercises, confirmed cyber incidents including appropriate engagement with supporting subject matter experts, documentation, evidence management and reporting to leadership as prescribed by ATB’s Cyber Security Incident Response Plan (CSIRP).
Timeliness of response will be a critical performance indicator in this role. Cross training specific to ATB skills/tools will be provided.
If you enjoy a challenge, this could be a good fit for you.
Accountabilities
Communicate and collaborate effectively with individuals of all levels of a large organization in-person or remotely
Handle Service Now cyber incidents assigned to the team’s queue.
Contribute to Incident Response reports, dedicated chat spaces and online meetings specific to each incident.
Contribute to Lessons Learned and process improvement actions.
Respond to alerts from system monitoring tools such as our SIEM, Email security and endpoint device (EDR) tools.
Skills, experience & requirements
Being a Team Player is critical. Simultaneously, the successful candidate must still exhibit the ability to work independently.
Excellent written and verbal communication skills. Able to quickly translate complex technical information into common language for Stakeholders and Team Members.
Prefer 5+ years of experience in Information Technology, specifically security, investigative skills & troubleshooting. Incident response experience is a bonus.
Knowledge of Google and Microsoft environments.
-
The following certifications will be strongly considered:
CISSP
Global Information Assurance Certification (GIAC) Certified Incident Handler (GCIH)
OffSec Incident Responder (OSIR)
Certified Computer Security Incident Handler (CSIH)
CompTIA Cybersecurity Analyst (CySA+)
EC-Council Certified Incident Handler (ECIH)
Cisco Certified CyberOps Associate
Don’t meet all the requirements on the list?
A resume only goes so far in expressing who you are and the unique perspectives you bring. If you believe your skills and experience align with the role—but you might not check all the boxes—we want to hear from you. We encourage candidates from all work backgrounds, equity-seeking communities and experience levels to apply. If you’re seeking a career where your drive, perspective and growth are celebrated, we want to hear from you.
We’re dedicated to building a workforce reflective of those within our communities, and a culture where our team members are equipped with what they need to succeed—their way. Part of creating an inclusive workplace is recognizing our role in advancing Truth and Reconciliation. We are committed to meeting and exceeding the standards set out in the Partnership Accreditation in Indigenous Relations program created by the Canadian Council for Aboriginal Business.
What happens next?
If you are shortlisted, you’ll hear from us after the posting closes. Check out our How We Hire page to learn more about our hiring process. If you need any accommodations throughout this process, please let us know at talentteam@atb.com
Stay in touch
We’re excited that you’re interested in a career with ATB. Follow us on LinkedIn, Facebook and Instagram to learn more about what our team is up to.