Senior Application Security Expert
All-in-one Philippine e-wallet and cryptocurrency exchange combining crypto trading with payments, bills, QR checkout, mobile load, and remittances.
Funding history
About Coins.ph
Coins.ph is a regulated digital-asset and payments platform operating under the Coins.ph brand. Its services include buying, selling, and holding cryptocurrency; peso wallets; bill payments; mobile load; QR payments; money transfers; and remittances. The current user agreement identifies Betur, Inc. and DCPay Philippines, Inc. as the entities doing business as coins.ph.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
Strengthen funds and blockchain security across exchange systems, wallets, big data platforms, and market-making infrastructure. Lead smart contract auditing and blockchain threat governance, analyze logs and APIs, build monitoring and defense mechanisms, and apply big data and machine learning to identify transaction risks.
Requirements
- Bachelor's degree or above in Computer Science, Information Security, Cryptography, or a related field.
- 5+ years of experience in application security, blockchain security, or financial risk control; exchange or fintech experience preferred.
- Strong knowledge of exchange funds-flow logic and application security frameworks.
- Hands-on experience with Slither, Mythril, Echidna, Foundry, or similar smart contract auditing tools.
- Experience with big data analysis and risk modeling using Spark, Elasticsearch, Graph DB, and ML-based anomaly detection.
- Strong offensive and defensive security mindset, cross-team collaboration skills, and ability to drive governance into practice.
- Proficient in English and able to follow current blockchain security research.
Responsibilities
- Lead application security governance for trading, wallet, big data risk analysis, and market-making systems.
- Analyze web service logs and APIs, preferably with AI.
- Build funds-security monitoring and defense mechanisms, including baselines, compliance strategies, and incident response plans.
- Identify and mitigate transaction-lifecycle risks using big data and machine learning.
- Audit smart contracts and automate vulnerability detection.
- Research blockchain attack vectors, develop detection rules, and deploy on-chain monitoring tools.
