Senior Application Security Expert

Coins.ph; Hong Kong; On-site; HKD 180,000 - 240,000; Full time

Job summary

Coins.ph is seeking a seasoned Application Security Expert to strengthen the funds and blockchain security of our global crypto exchange. You will lead security for exchange systems, wallets, big data platforms and market-making infrastructure, and manage smart contract auditing and governance initiatives.

The role requires 5+ years in application or blockchain security, with hands-on auditing tool experience and strong knowledge of security frameworks.

Qualifications

• 5+ years of experience in application security, blockchain security, or financial risk control.
• Exchange/fintech background is preferred.
• Strong knowledge of exchange funds flow logic and security frameworks.
• Hands-on experience with smart contract auditing tools.
• Experience with big data analysis and risk modeling.
• Strong offensive/defensive security mindset and governance ability.
• Proficient in English and able to follow blockchain security research.

Responsibilities

• Lead application security governance for core systems (trading, wallet, big data risk analysis, market-making).
• Web service log and API analysis, preferably with AI.
• Build monitoring and defense mechanisms for funds security; define baselines, compliance strategies, and incident response plans.
• Identify and mitigate risks across the transaction lifecycle; apply big data/ML.
• Audit and automate detection of smart contract vulnerabilities.
• Research blockchain attack vectors, develop detection rules, and deploy on-chain monitoring tools.

Skills

Application security

Blockchain security

Smart contract auditing

Big data analysis

English proficiency

Governance & collaboration

Education

Bachelor's degree or above in Computer Science or related field

Tools

Slither

Mythril

Echidna

Foundry

Spark

Elasticsearch

Graph DB

ML-based anomaly detection

Job description

We are looking for a seasoned Application Security Expert to strengthen the funds and blockchain security of our global crypto exchange. This role focuses on securing exchange systems, wallets, big data platforms, and market-making infrastructure, while also leading smart contract auditing and blockchain threat governance.

Responsibilities

• Lead application security governance for core systems (trading, wallet, big data risk analysis, market-making)
• Web service log and API analysis, preferabally with AI
• Build monitoring and defense mechanisms for funds security; define baselines, compliance strategies, and incident response plans
• Identify and mitigate risks across the transaction lifecycle; apply big data/ML
• Audit and automate detection of smart contract vulnerabilities
• Research blockchain attack vectors, develop detection rules, and deploy on-chain monitoring tools

Requirements

• Bachelor’s degree or above in Computer Science, Information Security, Cryptography, or related field
• 5+ years of experience in application security, blockchain security, or financial risk control; exchange/fintech background preferred
• Strong knowledge of exchange funds flow logic and application security frameworks
• Hands-on experience with smart contract auditing tools (e.g., Slither, Mythril, Echidna, Foundry)
• Skilled in big data analysis & risk modeling (Spark, Elasticsearch, Graph DB, ML-based anomaly detection)
• Strong offensive/defensive security mindset, cross-team collaboration skills, and ability to drive governance into practice
• Proficient in English; able to follow cutting-edge blockchain security research

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.