Senior Cloud Security Consultant (Public Cloud, DevSecOps & AI Security)

POSITION OVERVIEW

DarkLab Operations is a growing cybersecurity services firm delivering managed defence, advisory, and technology solutions to enterprise clients. We are seeking a Senior Associate to act as a consultant supporting clients in the design, architecture, adoption, and review of public cloud infrastructure and security, DevSecOps practices, and AI security across Hong Kong and the region.

KEY RESPONSIBILITIES

• Advise clients on the design and architecture of secure public cloud environments (AWS, Azure, GCP) — landing zones, IAM, network security, and infrastructure-as-code — from requirements through solution blueprint

• Support client cloud adoption and migration programmes — platform selection, security architecture, workload migration planning, and implementation oversight

• Review and assess client cloud environments — cloud security posture assessments, configuration reviews against CIS / NIST benchmarks, and remediation recommendations

• Advise on DevSecOps adoption — embedding SAST / DAST / SCA scanning, secrets management, container security, and policy-as-code into CI/CD pipelines

• Support AI security engagements — reviewing LLM applications, AI governance controls, model supply chain risks, and data protection for AI workloads

• Convey pragmatic recommendations to clients through clear written reports, architecture documents, and presentations

REQUIREMENTS

Essential

• 2–4 years of hands-on experience in public cloud, security engineering, or DevOps / DevSecOps engineering or consulting roles

• Working proficiency in at least one major public cloud platform (AWS, Azure, or GCP), including core IAM, networking, and security services

• Experience with infrastructure-as-code (Terraform or similar) and CI/CD tooling (GitHub Actions, GitLab CI, Azure DevOps, or Jenkins)

• Scripting in Python, Bash, or PowerShell, and understanding of container technologies (Docker, Kubernetes) and their security considerations

• University degree in computer science, information systems, engineering, or a related discipline

• Strong communication skills in English; Cantonese and/or Mandarin an advantage

Certifications – Must Have (at least one)

• AWS Certified Solutions Architect – Associate or AWS Certified Security – Specialty

• Microsoft Certified: Azure Administrator Associate (AZ-104) or Azure Security Engineer Associate (AZ-500)

• Google Cloud Associate Cloud Engineer or Professional Cloud Security Engineer

Certifications / Skills – Nice to Have

• Certified Kubernetes Administrator (CKA) / Security Specialist (CKS), or HashiCorp Terraform Associate

• DevSecOps certifications — Practical DevSecOps CDP (Certified DevSecOps Professional), EC-Council Certified DevSecOps Engineer (E|CDE), or GIAC GCSA

• AI security / governance certifications — ISACA AAISM, Certified AI Security Professional (CAISP), ISO/IEC 42001 Lead Implementer, or Microsoft AI-102