Senior Application Security Expert
Digital wallet and cryptocurrency exchange platform enabling Filipinos to buy, sell and manage crypto assets with integrated payment services.
About Coins.ph
Coins.ph serves as a regulated crypto platform for over 18 million Filipino users, offering cryptocurrency trading, bill payments, and remittance services. The platform integrates QR payments and mobile load purchases with crypto services, making digital assets accessible to Filipinos.
Skills
About the Role
You will strengthen the funds and blockchain security of a global crypto exchange, focusing on securing exchange systems, wallets, big data platforms, and market-making infrastructure, while also leading smart contract auditing and blockchain threat governance. You'll analyze web service logs and APIs, ideally leveraging AI, and build monitoring and defense mechanisms to protect funds. You will identify and mitigate risks across the transaction lifecycle using big data and machine learning, audit smart contracts for vulnerabilities, and research blockchain attack vectors to develop detection rules and on-chain monitoring tools.
Requirements
- Bachelor's degree or above in Computer Science, Information Security, Cryptography, or related field
- 5+ years of experience in application security, blockchain security, or financial risk control; exchange/fintech background preferred
- Strong knowledge of exchange funds flow logic and application security frameworks
- Hands-on experience with smart contract auditing tools (e.g., Slither, Mythril, Echidna, Foundry)
- Skilled in big data analysis & risk modeling (Spark, Elasticsearch, Graph DB, ML-based anomaly detection)
- Strong offensive/defensive security mindset, cross-team collaboration skills, and ability to drive governance into practice
- Proficient in English; able to follow cutting-edge blockchain security research
Responsibilities
- Lead application security governance for core systems (trading, wallet, big data risk analysis, market-making)
- Analyze web service logs and APIs, preferably with AI
- Build monitoring and defense mechanisms for funds security; define baselines, compliance strategies, and incident response plans
- Identify and mitigate risks across the transaction lifecycle; apply big data/ML
- Audit and automate detection of smart contract vulnerabilities
- Research blockchain attack vectors, develop detection rules, and deploy on-chain monitoring tools
