CurriculumVitae

zhaohongri’s Curriculum Vitae

Zhao Hongri (Leo Zhao)

Cloud Security Solutions Architect

📧 flashoop@gmail.com | 📱 +60 17 203 2066 / +86 158 1127 0428

📍 Kuala Lumpur, Malaysia | 🎓 B.S. Computer Science | 💼 18 Years Experience

Professional Summary

Accomplished Cloud Security Solutions Architect with over 18 years of IT experience and 10+ years specializing in cloud security across AWS, Azure, and GCP platforms. Proven track record managing cloud security products at Alibaba Cloud and Huawei Cloud, with expertise in Anti-DDoS defense, Identity and Access Management (IAM), penetration testing, and regulatory compliance (GDPR, PCI-DSS, R155).

Successfully delivered $25M+ in security solutions revenue for enterprise clients across APAC, Middle East, and LATAM regions, including financial services, Web3, and automotive sectors. Holder of multiple elite certifications including CISSP, CCSP, OSCP, OSEP, GCPN, and AWS certifications.

Core Competencies

Cloud Security: AWS Security Specialist | Azure & GCP Security | Anti-DDoS Defense Architecture | IAM Design & Implementation

Cybersecurity: Penetration Testing (OSCP, OSEP, GCPN) | Vulnerability Assessment | Security Architecture | Threat Detection & Response

Compliance & Governance: GDPR | PCI-DSS | R155 | PDPA | SOC 2 | ISO 27001 | CIPP/E Certified

Technical Skills: Cloud Native Security | Network Security | Application Security | DevSecOps | Security Automation

Professional Experience

Cloud Security Solutions Architect | Huawei Technologies Malaysia

Huawei Cloud Computing Technology Co., Ltd. | December 2016 - Present

Global Sales Solutions Department (Malaysia) | Current Role

Architected and delivered comprehensive cloud security solutions for customers across Asia Pacific, Middle East, Africa, and Latin America, generating over $25M USD in security revenue
Spearheaded security and compliance solutions for Fintech, Web3, and automotive sectors, serving high-profile clients including:
Financial Services: Green Link Bank (Singapore), Asia Pacific Exchange APEX (Singapore)
Cryptocurrency Exchanges: Gate.io (Middle East), BitMar (Middle East)
Enterprise: Astro (Malaysia), Sunway (Malaysia)
Led compliance consulting engagements for GDPR, PDPA, PCI-DSS, and R155 standards
Designed and implemented Internet of Vehicles (IoV) security solutions for Chinese automotive manufacturers expanding globally, including Great Wall Motors, BAIC Foton, and GreatWall Automobile
Developed IoV KPI monitoring solutions and Vehicle Security Operations Center (VSOC) architectures

Cloud Security R&D Department (Beijing) | Previous Role

Anti-DDoS Product Management:

Led the DDoS Defense Design Team for Huawei Cloud Anti-DDoS Service, defining product strategy and technical architecture
Designed public cloud network defense platform solutions and BGP proxy broadcast infrastructure for DDoS mitigation
Architected enhanced DDoS attack detection and defense solutions for Huawei Cloud Internet egress networks
Built Advanced Anti-DDoS solutions for overseas edge security deployments

Identity and Access Management (IAM) Product Management:

Managed IAM service product development, delivering critical features including:
Fine-grained authorization and access control
Global cloud IAM architecture
Enterprise project management capabilities
GDPR compliance features and privacy controls

Cloud Security Product Manager | Alibaba Cloud Computing Technology Co., Ltd.

Cloud Security Product Management Department | February 2013 - December 2016 | Hangzhou, China

Product Manager for Alibaba Cloud’s Advanced Anti-DDoS service, the company’s flagship cloud security offering
Drove product strategy for Advanced Anti-DDoS, which generated over 60% of total cloud security service revenue
Defined product roadmap, feature prioritization, and go-to-market strategies for enterprise DDoS protection
Collaborated with engineering teams to deliver industry-leading DDoS mitigation capabilities
Conducted competitive analysis and positioned Alibaba Cloud as a leader in cloud security market

Product Manager, Enterprise Security | Qihu 360 Enterprise Security

Enterprise Security Product Division | September 2006 - December 2013 | Beijing, China

Product Manager at China’s largest security company, responsible for enterprise security product portfolio
Founded and led 360 Website Guard, one of China’s pioneering cloud security protection services competing with CloudFlare
Managed cross-functional team of 10+ members, delivering security services to 100,000+ customers
Drove product innovation in web application firewall (WAF) and DDoS protection technologies
Established early-stage cloud security product-market fit in the Chinese enterprise market

Key Projects & Achievements

Enterprise Client Projects

Gaming Sector Specialist:

Lead security architect for top-tier gaming clients including Tencent Games (LATAM), Lilith Games, and 37 Interactive Entertainment (三七互娱).

Designed robust architectures to defend against Tbps-level DDoS attacks while maintaining ultra-low latency (<50ms) for global players.

Financial Services & Web3 Security

Architected cloud security infrastructure for Singapore’s Green Link Bank and APEX Exchange
Designed high-availability, DDoS-resistant architectures for cryptocurrency exchanges serving Middle East markets
Implemented PCI-DSS compliant cloud environments for payment processing systems

Automotive IoV Compliance Solutions

Delivered R155 compliance architecture for multiple Chinese automotive manufacturers expanding to international markets
Designed Vehicle Security Operations Center (VSOC) for real-time threat monitoring and incident response
Implemented security KPI frameworks aligned with automotive cybersecurity regulations

Personal Projects & Open Source

CyberDiagram - Security Audit Specialist Agent

cyberdiagram.com

AI-driven automated security audit platform integrating professional penetration testing tools with intelligent decision-making capabilities using Claude AI and Model Context Protocol (MCP).

Key Features:

Automated Reconnaissance: Network scanning, port discovery, service enumeration via Nmap integration
Vulnerability Research: Exploit-DB and Metasploit framework integration
AI-Driven Analysis: Intelligent workflow orchestration and vulnerability prioritization
Compliance Logging: SOC 2 and ISO 27001 compliant audit trails
Professional Reporting: Automated Markdown-based security assessment reports
Security Controls: Authorization validation, rate limiting, comprehensive audit logging
Architecture: Hybrid Brain + Executor model separating cognitive planning from operational execution

Technology Stack: Claude AI, Model Context Protocol, Nmap, Metasploit, Exploit-DB

cyberdiagram
cyberdiagram2

Snapano - Network Asset Visualization Platform

snapano.com

Data visualization platform for simplified asset management and compliance reporting. Enables online management of network assets through interactive topology visualization.