Senior Cloud Security Consultant (Public Cloud, DevSecOps & AI Security)

PwC; Hong Kong; On-site; HKD 600,000 - 900,000; Full time

Job summary

DarkLab Operations is seeking a Senior Cloud Security Consultant to support clients in designing secure public cloud environments and DevSecOps practices. You will review architectures, implement security controls, and oversee cloud migrations across Hong Kong and the region.

Responsibilities include advising on IAM, network security, and CI/CD integrations, plus reviewing AI security considerations and governance. Strong English communication is required; Cantonese/Mandarin are a plus.

Qualifications

• 2–4 years hands‑on experience in public cloud, security engineering, or DevOps/DevSecOps roles.
• Proficiency in at least one major cloud platform (AWS/Azure/GCP) with IAM, networking and security services.
• Experience with infrastructure‑as‑code (Terraform or similar) and CI/CD tooling (GitHub Actions, GitLab CI, Azure DevOps, Jenkins).
• Scripting (Python, Bash, or PowerShell) and understanding of Docker/Kubernetes security.
• University degree in CS/IS/Engineering or related field.
• Strong English communication; Cantonese and/or Mandarin an advantage.

Responsibilities

• Advise clients on secure public cloud design and architecture (IAM, networking, landing zones).
• Support cloud adoption and migration programmes with security architecture oversight.
• Review client cloud environments for CIS/NIST posture and remediation.
• Guide DevSecOps adoption with SAST/DAST/SCA and policy‑as‑code in CI/CD pipelines.
• Support AI security engagements including governance, data protection, and model risk.
• Deliver clear written reports, architecture documents, and client presentations.

Skills

Public cloud

DevSecOps

AI security

Cloud architecture

Education

University degree in CS/IS/Engineering

Tools

Terraform

GitHub Actions

GitLab CI

Azure DevOps

Jenkins

Job description

Senior Cloud Security Consultant (Public Cloud, DevSecOps & AI Security)

DarkLab Operations is a growing cybersecurity services firm delivering managed defence, advisory, and technology solutions to enterprise clients. We are seeking a Senior Associate to act as a consultant supporting clients in the design, architecture, adoption, and review of public cloud infrastructure and security, DevSecOps practices, and AI security across Hong Kong and the region.

Key Responsibilities

• Advise clients on the design and architecture of secure public cloud environments (AWS, Azure, GCP) — landing zones, IAM, network security, and infrastructure-as-code — from requirements through solution blueprint
• Support client cloud adoption and migration programmes — platform selection, security architecture, workload migration planning, and implementation oversight
• Review and assess client cloud environments — cloud security posture assessments, configuration reviews against CIS / NIST benchmarks, and remediation recommendations
• Advise on DevSecOps adoption — embedding SAST / DAST / SCA scanning, secrets management, container security, and policy-as-code into CI/CD pipelines
• Support AI security engagements — reviewing LLM applications, AI governance controls, model supply chain risks, and data protection for AI workloads
• Convey pragmatic recommendations to clients through clear written reports, architecture documents, and presentations

Requirements

• 2–4 years of hands‑on experience in public cloud, security engineering, or DevOps / DevSecOps engineering or consulting roles
• Working proficiency in at least one major public cloud platform (AWS, Azure, or GCP), including core IAM, networking, and security services
• Experience with infrastructure-as-code (Terraform or similar) and CI/CD tooling (GitHub Actions, GitLab CI, Azure DevOps, or Jenkins)
• Scripting in Python, Bash, or PowerShell, and understanding of container technologies (Docker, Kubernetes) and their security considerations
• University degree in computer science, information systems, engineering, or a related discipline
• Strong communication skills in English; Cantonese and/or Mandarin an advantage

Certifications – Must Have (at least one)

• AWS Certified Solutions Architect – Associate or AWS Certified Security – Specialty

Certifications / Skills – Nice to Have

• Certified Kubernetes Administrator (CKA) / Security Specialist (CKS), or HashiCorp Terraform Associate
• DevSecOps certifications — Practical DevSecOps CDP (Certified DevSecOps Professional), EC-Council Certified DevSecOps Engineer (E|CDE), or GIAC GCSA
• AI security / governance certifications — ISACA AAISM, Certified AI Security Professional (CAISP), ISO/IEC 42001 Lead Implementer, or Microsoft AI-102