Zhao Hongri (Leo Zhao)

Professional Summary

Accomplished Cloud Security Solutions Architect with over 18 years of IT experience and 10+ years specializing in cloud security across AWS, Azure, and GCP platforms. Proven track record managing cloud security products at Alibaba Cloud and Huawei Cloud, with expertise in Anti-DDoS defense, Identity and Access Management (IAM), penetration testing, and regulatory compliance (GDPR, PCI-DSS, R155).

Successfully delivered $25M+ in security solutions revenue for enterprise clients across APAC, Middle East, and LATAM regions, including financial services, Web3, and automotive sectors. Holder of multiple elite certifications including CISSP, CCSP, OSCP, OSEP, GCPN, and AWS certifications.

Core Competencies

Cloud Security AWS Security Specialist | Azure & GCP Security | Anti-DDoS Defense Architecture | IAM Design & Implementation

Cybersecurity Penetration Testing (OSCP, OSEP, GCPN) | Vulnerability Assessment | Security Architecture | Threat Detection & Response

Compliance & Governance GDPR | PCI-DSS | R155 | PDPA | SOC 2 | ISO 27001 | CIPP/E Certified

Technical Skills Cloud Native Security | Network Security | Application Security | DevSecOps | Security Automation

Capability Ratings

Cloud Security Solutions Architect

100%

AWS/Azure/GCP Security Architecture • Anti-DDoS Defense Systems (Huawei/Alibaba Cloud) • IAM Design & Implementation • Multi-cloud Security Solutions ($25M+ revenue delivered) • Enterprise Security Architecture

Cloud Penetration Tester

95%

OSCP, OSEP, GCPN Certified • Professional Penetration Testing • Vulnerability Assessment & Exploitation • Security Audit & Testing Methodologies • Tools: Metasploit, Nmap, Burp Suite, Exploit-DB

AI for Security

85%

CyberDiagram: AI-Driven Security Audit Platform • Claude AI & Model Context Protocol Integration • Intelligent Vulnerability Prioritization • Automated Security Assessment & Reporting • Hybrid Brain + Executor Architecture

Cloud & Privacy Compliance

90%

CISSP, CCSP, CIPP/E Certified • GDPR, PCI-DSS, R155, PDPA Implementation • SOC 2 & ISO 27001 Frameworks • Automotive IoV Compliance (R155) • Multi-region Compliance Consulting

Security Product Management

100%

10+ Years Product Management (Alibaba/Huawei/Qihu 360) • Anti-DDoS Product Strategy (60%+ revenue contribution) • IAM Product Development & Roadmap • Go-to-Market Strategy & Positioning • Cross-functional Team Leadership (100,000+ customers served)

Professional Experience

Cloud Security Solutions Architect

Huawei Cloud Computing Technology Co., Ltd.

December 2016 - Present

Global Sales Solutions Department (Malaysia) | Current Role

Architected and delivered comprehensive cloud security solutions for customers across Asia Pacific, Middle East, Africa, and Latin America, generating over $25M USD in security revenue
Spearheaded security and compliance solutions for Fintech, Web3, and automotive sectors, serving high-profile clients including:
- Financial Services: Green Link Bank (Singapore), Asia Pacific Exchange APEX (Singapore)
- Cryptocurrency Exchanges: Gate.io (Middle East), BitMar (Middle East)
- Enterprise: Astro (Malaysia), Sunway (Malaysia)
Led compliance consulting engagements for GDPR, PDPA, PCI-DSS, and R155 standards
Designed and implemented Internet of Vehicles (IoV) security solutions for Chinese automotive manufacturers expanding globally, including Great Wall Motors, BAIC Foton, and GreatWall Automobile
Developed IoV KPI monitoring solutions and Vehicle Security Operations Center (VSOC) architectures

Cloud Security R&D Department (Beijing) | Previous Role

Anti-DDoS Product Management:

Led the DDoS Defense Design Team for Huawei Cloud Anti-DDoS Service, defining product strategy and technical architecture
Designed public cloud network defense platform solutions and BGP proxy broadcast infrastructure for DDoS mitigation
Architected enhanced DDoS attack detection and defense solutions for Huawei Cloud Internet egress networks
Built Advanced Anti-DDoS solutions for overseas edge security deployments

Identity and Access Management (IAM) Product Management:

Managed IAM service product development, delivering critical features including fine-grained authorization and access control, global cloud IAM architecture, enterprise project management capabilities, and GDPR compliance features

Cloud Security Product Manager

Alibaba Cloud Computing Technology Co., Ltd.

February 2013 - December 2016 | Hangzhou, China

Product Manager for Alibaba Cloud's Advanced Anti-DDoS service, the company's flagship cloud security offering
Drove product strategy for Advanced Anti-DDoS, which generated over 60% of total cloud security service revenue
Defined product roadmap, feature prioritization, and go-to-market strategies for enterprise DDoS protection
Collaborated with engineering teams to deliver industry-leading DDoS mitigation capabilities
Conducted competitive analysis and positioned Alibaba Cloud as a leader in cloud security market

Product Manager, Enterprise Security

Qihu 360 Enterprise Security

September 2006 - December 2013 | Beijing, China

Product Manager at China's largest security company, responsible for enterprise security product portfolio
Founded and led 360 Website Guard, one of China's pioneering cloud security protection services competing with CloudFlare
Managed cross-functional team of 10+ members, delivering security services to 100,000+ customers
Drove product innovation in web application firewall (WAF) and DDoS protection technologies
Established early-stage cloud security product-market fit in the Chinese enterprise market

Key Projects & Achievements

Gaming Sector Specialist

Lead security architect for top-tier gaming clients including Tencent Games (LATAM), Lilith Games, and 37 Interactive Entertainment (三七互娱). Designed robust architectures to defend against Tbps-level DDoS attacks while maintaining ultra-low latency (<50ms) for global players.

Financial Services & Web3 Security

Architected cloud security infrastructure for Singapore's Green Link Bank and APEX Exchange
Designed high-availability, DDoS-resistant architectures for cryptocurrency exchanges serving Middle East markets
Implemented PCI-DSS compliant cloud environments for payment processing systems

Automotive IoV Compliance Solutions

Delivered R155 compliance architecture for multiple Chinese automotive manufacturers expanding to international markets
Designed Vehicle Security Operations Center (VSOC) for real-time threat monitoring and incident response
Implemented security KPI frameworks aligned with automotive cybersecurity regulations

Personal Projects & Open Source

CyberDiagram - Security Audit Specialist Agent

cyberdiagram.com
How to build the AI agent for Penetration with Claude Code

AI-driven automated security audit platform integrating professional penetration testing tools with intelligent decision-making capabilities using Claude AI and Model Context Protocol (MCP).

Key Features:

Automated Reconnaissance: Network scanning, port discovery, service enumeration via Nmap integration
Vulnerability Research: Exploit-DB and Metasploit framework integration
AI-Driven Analysis: Intelligent workflow orchestration and vulnerability prioritization
Compliance Logging: SOC 2 and ISO 27001 compliant audit trails
Professional Reporting: Automated Markdown-based security assessment reports
Architecture: Hybrid Brain + Executor model separating cognitive planning from operational execution

Technology Stack: Claude AI, Model Context Protocol, Nmap, Metasploit, Exploit-DB

Snapano - Network Asset Visualization Platform

snapano.com

Data visualization platform for simplified asset management and compliance reporting. Enables online management of network assets through interactive topology visualization.

Technology Stack: React, Three.js, WebGL

GitHub: three-editor-React-Alpha | diagram-front-end

Demo: YouTube Video