Wallet & Crypto Security Engineer

Coins.ph; Any-Martin-Rieux; Sur place; EUR 70 000 - 110 000; Plein temps

Résumé du poste

Coins.ph is seeking a security-focused Web3 professional to lead wallet security architectures and MPC/multi‑sig strategies. You will oversee private key lifecycle, disaster recovery drills, and on-chain security for major networks.

Ideal candidates have 1–3 years in Web3 or blockchain security, strong cryptography knowledge, and hands-on experience with wallet protection and contract security reviews. Join a fast-growing crypto brand expanding in APAC and beyond.

Qualifications

• Bachelor’s degree or above in Computer Science, Cybersecurity, Blockchain or related majors, with 1–3 years of working experience in Web3 or blockchain security.
• Familiar with cryptography principles, key management, encrypted storage, and FIPS 140-2/3 standards.
• In-depth knowledge of MPC, TSS threshold signatures and on-chain multi-signature mechanisms with hands-on DR drills.
• Familiar with mainstream public chains (BTC, ETH, TRON) and node operation, RPC interface security hardening, on-chain attack prevention.
• Familiar with common smart contract security vulnerabilities and able to conduct security audits and risk assessments.

Responsabilités

• Wallet Architecture Security: lead the security architecture of cold, warm, and hot wallets and lifecycle of private keys.
• MPC & Multi-Signature Strategy Management: manage policy configuration, permission grading and isolation for wallets and multi-sig contracts; conduct disaster recovery drills.
• On-Chain Transaction & Node Security: harden and operate full nodes and RPC interfaces for mainstream chains; defend against various attacks.
• Smart Contract Interaction Review: audit security of interactions with external contracts (USDT, USDC, DEXs) to prevent vulnerabilities.

Connaissances

Web3 Security

Key Management

MPC

Smart Contract Review

Blockchain Node Security

Formation

Bachelor’s degree in Computer Science or related

Outils

FIPS 140-2/3

RPC Security

Smart Contract Auditing

Description du poste

Coins is the most established crypto brand in The Philippines and has gained the trust of more than 18 million users. Through the easy-to-use mobile app, users can buy and sell a variety of different cryptocurrencies and access a wide range of financial services.

Coins is fully regulated by the Bangko Sentral ng Pilipinas (BSP) and is the first ever crypto-based company in Asia to hold both Virtual Currency and Electronic Money Issuer licenses from a central bank.

Responsibilities

• Wallet Architecture Security Construction: Lead and maintain the security architecture of the company’s cold, warm and hot cryptocurrency wallets. Standardize the full lifecycle of private key generation, storage, usage, backup and destruction, and ensure the entire system complies with top-tier industry security standards including FIPS 140-2/3


• MPC & Multi‑Signature Strategy Management: Manage security policy configuration, permission grading and isolation for MPC (Multi-Party Computation) wallets and multi‑sig smart contracts. Conduct regular disaster recovery drills to eliminate single points of failure, permission abuse and internal malicious risks


• On-Chain Transaction & Node Security: Conduct security hardening and daily operation and maintenance for full nodes and RPC interfaces of mainstream public chains including BTC, ETH and Tron, defending against node hijacking, Sybil attacks, unauthorized access and other underlying security threats


• Smart Contract Interaction Review: Audit the security of business system interactions with external smart contracts such as USDT, USDC and DEXs. Identify and prevent common on‑chain vulnerabilities including approval phishing and reentrancy attacks to avoid asset security risks

Requirements

• Bachelor’s degree or above in Computer Science, Cybersecurity, Cryptography, Software Engineering, Blockchain or related majors, with 1-3 years of working experience in Web3 or blockchain security


• Familiar with basic cryptography principles, proficient in core logic of public and private key management and encrypted storage, familiar with FIPS 140-2/3 standards and cold/hot wallet architecture


• In-depth knowledge of MPC, TSS threshold signature and on‑chain multi‑signature mechanisms, with hands‑on experience in permission control, disaster recovery drills and risk investigation


• Familiar with the underlying logic of mainstream public chains (BTC, ETH, TRON), with practical capabilities in public chain node operation, RPC interface security hardening and on‑chain attack prevention


• Familiar with common smart contract security vulnerabilities, able to independently complete contract interaction security audits, risk assessment and problem rectification


• Strong security risk awareness and sense of responsibility, rigorous and meticulous working attitude, with in‑depth understanding of digital asset and private key security. Experience in wallet security at large platforms is preferred

Meaningful Collaborations - The successful candidate will work cross‑functionally with other relevant teams to carry out implementations that will improve and create an impact on customer experience.

Scalable Growth - Be part of a fast‑growing organization with the vision to expand its territories outside APAC which will provide opportunities for career advancement.

A Space For Bright Ideas - Let your bright ideas be converted into meaningful changes! Coins culture welcomes new ideas backed up by data to create an impact.

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.