Senior Associate – Cloud Security Consultant (Public Cloud, DevSecOps & AI Security) – Technology Risk – Consulting – Hong Kong

POSITION OVERVIEW

DarkLab Operations is a growing cybersecurity services firm delivering managed defence, advisory, and technology solutions to enterprise clients. We are seeking a Senior Associate to act as a consultant supporting clients in the design, architecture, adoption, and review of public cloud infrastructure and security, DevSecOps practices, and AI security across Hong Kong and the region.

KEY RESPONSIBILITIES

Advise clients on the design and architecture of secure public cloud environments (AWS, Azure, GCP) — landing zones, IAM, network security, and infrastructure-as-code — from requirements through solution blueprint

Support client cloud adoption and migration programmes — platform selection, security architecture, workload migration planning, and implementation oversight

Review and assess client cloud environments — cloud security posture assessments, configuration reviews against CIS / NIST benchmarks, and remediation recommendations

Advise on DevSecOps adoption — embedding SAST / DAST / SCA scanning, secrets management, container security, and policy-as-code into CI/CD pipelines

Support AI security engagements — reviewing LLM applications, AI governance controls, model supply chain risks, and data protection for AI workloads

Convey pragmatic recommendations to clients through clear written reports, architecture documents, and presentations

REQUIREMENTS

Essential

2–4 years of hands-on experience in public cloud, security engineering, or DevOps / DevSecOps engineering or consulting roles

Working proficiency in at least one major public cloud platform (AWS, Azure, or GCP), including core IAM, networking, and security services

Experience with infrastructure-as-code (Terraform or similar) and CI/CD tooling (GitHub Actions, GitLab CI, Azure DevOps, or Jenkins)

Scripting in Python, Bash, or PowerShell, and understanding of container technologies (Docker, Kubernetes) and their security considerations

University degree in computer science, information systems, engineering, or a related discipline

Strong communication skills in English; Cantonese and/or Mandarin an advantage

Certifications – Must Have (at least one)

AWS Certified Solutions Architect – Associate or AWS Certified Security – Specialty

Microsoft Certified: Azure Administrator Associate (AZ-104) or Azure Security Engineer Associate (AZ-500)

Google Cloud Associate Cloud Engineer or Professional Cloud Security Engineer

Certifications / Skills – Nice to Have

Certified Kubernetes Administrator (CKA) / Security Specialist (CKS), or HashiCorp Terraform Associate

DevSecOps certifications — Practical DevSecOps CDP (Certified DevSecOps Professional), EC-Council Certified DevSecOps Engineer (E|CDE), or GIAC GCSA

AI security / governance certifications — ISACA AAISM, Certified AI Security Professional (CAISP), ISO/IEC 42001 Lead Implementer, or Microsoft AI-102