DevSecOps / Cloud Security Manager | HKD 65K - HKD 80K / mth | Inhouse + Perm

Venturenix; Hong Kong; On-site; HKD 900,000 - 1,300,000; Full time

Job summary

Venturenix is seeking a DevSecOps/Cloud & Platform Security Manager to lead the security of cloud, hybrid, and container platforms in a dynamic enterprise environment.

You will embed security controls, oversee cloud security operations, and collaborate with Security Architects, Infrastructure, and Applications teams to elevate security postures across digital services. Relevant certifications and hands-on IAM, CSPM, CWPP experience are key.

Qualifications

• Minimum 5 years hands-on Cloud Security Operations, DevSecOps, Platform Security, or Infrastructure Security.
• Proven track record managing enterprise cloud security platforms across AWS, Azure, or Tencent Cloud environments.
• Deep experience with CSPM, CWPP, container/Kubernetes security, and IAM solutions in production.

Responsibilities

• Embed robust security controls into cloud, hybrid, container, and infrastructure platform designs.
• Oversee daily operations of enterprise cloud security controls aligned with policies and regulations.
• Administer and optimize network/platform security technologies (WAF, API security, DDoS, firewalls, IDS/IPS).
• Monitor and remediate cloud security gaps, misconfigurations, and emerging vulnerabilities.
• Deliver cloud security metrics, risk insights, and executive reports to stakeholders.
• Collaborate with Security Architects, Infrastructure, and App teams to strengthen security postures.
• Support cloud security roadmap, vulnerability management, and incident investigations.
• Foster a high-trust, inclusive team environment with cross-department collaboration.

Skills

Cloud security

DevSecOps

CSPM

CWPP

IAM

Terraform

CI/CD

Zero Trust

Regulatory knowledge

Education

CCSP/CISSP/AZ-500/AWS Security Specialty certs

Tools

WAF

DDoS protection

Kubernetes security

Terraform (IaC)

Job description

Our client is a leading conglomerate with a talented Tech team and stable and growing businesses.

To cope with the expansion and the Digital Transformation journey, they are currently looking for a DevSecOps / Cloud & Platform Security Manager to join their team.

Job Description

• Drive the embedding of robust security controls into cloud, hybrid, container, and infrastructure platform designs.
• Oversee and maintain daily operations of enterprise cloud security controls, ensuring full alignment with organizational policies and regulatory frameworks.
• Administer and optimize network and platform security technologies, including WAF, API security, DDoS protection, firewalls, and IDS/IPS systems.
• Monitor, identify, and remediate cloud security control gaps, misconfigurations, and emerging operational vulnerabilities.
• Formulate and deliver regular cloud security metrics, risk insights, and executive reports to key business and IT stakeholders.
• Partner closely with Security Architects, Infrastructure, and Application teams to strengthen security postures across digital services.
• Support cloud security roadmap initiatives, adoption strategies, vulnerability management, and incident investigations.
• Actively contribute to a high-trust, inclusive team environment fostering cross-departmental collaboration and knowledge sharing.

Requirements

• Minimum 5 years of hands‑on experience in Cloud Security Operations, DevSecOps, Platform Security, or Infrastructure Security.
• Proven track record managing enterprise cloud security platforms across AWS, Azure, or Tencent Cloud environments.
• Deep experience operating CSPM, CWPP, container/Kubernetes security, and IAM solutions within production settings.
• Strong working knowledge of Infrastructure-as-Code (IaC) security concepts using Terraform or equivalent tools.
• Solid understanding of DevSecOps practices, CI/CD pipelines, source control, and automated security testing.
• Practical knowledge of network security controls, including WAF, DDoS mitigation, and API security architecture.
• Strong familiarity with Zero Trust principles, workload protection standards, and cloud governance frameworks.
• Excellent communication, collaborative mindset, and relevant certifications (e.g., CCSP, CISSP, AZ-500, AWS Security Specialty).