Senior Associate – Cloud Security Consultant (Public Cloud, DevSecOps & AI Security) – Technology Risk – Consulting – Hong Kong

Advise clients on the design and architecture of secure public cloud environments (AWS, Azure, GCP) — landing zones, IAM, network security, and infrastructure-as-code — from

through solution blueprint Support client cloud adoption and migration programmes — platform selection, security architecture, workload migration planning, and implementation oversight Review and assess client cloud environments — cloud security posture assessments, configuration reviews against CIS / NIST benchmarks, and remediation recommendations Advise on DevSecOps adoption — embedding SAST / DAST / SCA scanning, secrets management, container security, and policy-as-code into CI/CD pipelines Support AI security engagements — reviewing LLM applications, AI governance controls, model supply chain risks, and data protection for AI workloads Convey pragmatic recommendations to clients through clear written reports, architecture documents, and presentations REQUIREMENTS Essential 2–4 years of hands-on experience in public cloud, security engineering, or DevOps / DevSecOps engineering or consulting roles Working proficiency in at least one major public cloud platform (AWS, Azure, or GCP), including core IAM, networking, and security services Experience with infrastructure-as-code (Terraform or similar) and CI/CD tooling (GitHub Actions, GitLab CI, Azure DevOps, or Jenkins) Scripting in Python, Bash, or PowerShell, and understanding of container technologies (Docker, Kubernetes) and their security considerations University degree in computer science, information systems, engineering, or a related discipline Strong communication skills in English; Cantonese and/or Mandarin an advantage Certifications – Must Have (at least one) AWS Certified Solutions Architect – Associate or AWS Certified Security – Specialty Microsoft Certified: Azure Administrator Associate (AZ-104) or Azure Security Engineer Associate (AZ-500) Google Cloud Associate Cloud Engineer or Professional Cloud Security Engineer Certifications / Skills – Nice to Have Certified Kubernetes Administrator (CKA) / Security Specialist (CKS), or HashiCorp Terraform Associate DevSecOps certifications — Practical DevSecOps CDP (Certified DevSecOps Professional), EC-Council Certified DevSecOps Engineer (E|CDE), or GIAC GCSA AI security / governance certifications — ISACA AAISM, Certified AI Security Professional (CAISP), ISO/IEC 42001 Lead Implementer, or Microsoft AI-102