Senior Application Security Expert

Coins.ph; Hong Kong; On-site; HKD 900,000 - 1,600,000; Full time

Job summary

Coins.ph is seeking a seasoned Application Security Expert to strengthen the funds and blockchain security of its global crypto exchange. The role focuses on securing exchange systems, wallets, big data platforms, and market-making infrastructure while leading smart contract auditing and blockchain threat governance.

You will drive security governance, analyze web services and APIs (with AI support), and develop monitoring, baselines, and incident response plans to protect funds and operations.

Qualifications

• Bachelor’s degree or above in Computer Science, Information Security, Cryptography, or related field.
• 5+ years of experience in application security, blockchain security, or financial risk control; exchange/fintech background preferred.
• Strong knowledge of exchange funds flow logic and application security frameworks.
• Hands-on experience with smart contract auditing tools (e.g., Slither, Mythril, Echidna, Foundry).
• Skilled in big data analysis & risk modeling (Spark, Elasticsearch, Graph DB, ML-based anomaly detection).
• Strong offensive/defensive security mindset, cross-team collaboration skills, and ability to drive governance into practice.

Responsibilities

• Lead application security governance for core systems (trading, wallet, big data risk analysis, market-making).
• Web service log and API analysis, preferabally with AI.
• Build monitoring and defense mechanisms for funds security; define baselines, compliance strategies, and incident response plans.
• Identify and mitigate risks across the transaction lifecycle; apply big data/ML.
• Audit and automate detection of smart contract vulnerabilities.
• Research blockchain attack vectors, develop detection rules, and deploy on-chain monitoring tools.

Skills

Blockchain security

Application security

Big data analysis

Risk modeling

Cross-team collaboration

Governance & threat governance

English proficiency

Education

Bachelor’s degree in CS/Info Security

Tools

Slither

Mythril

Echidna

Foundry

Job description

We are looking for a seasoned Application Security Expert to strengthen the funds and blockchain security of our global crypto exchange. This role focuses on securing exchange systems, wallets, big data platforms, and market-making infrastructure, while also leading smart contract auditing and blockchain threat governance.

Responsibilities

• Lead application security governance for core systems (trading, wallet, big data risk analysis, market-making)
• Web service log and API analysis, preferabally with AI
• Build monitoring and defense mechanisms for funds security; define baselines, compliance strategies, and incident response plans
• Identify and mitigate risks across the transaction lifecycle; apply big data/ML
• Audit and automate detection of smart contract vulnerabilities
• Research blockchain attack vectors, develop detection rules, and deploy on-chain monitoring tools

Requirements

• Bachelor’s degree or above in Computer Science, Information Security, Cryptography, or related field
• 5+ years of experience in application security, blockchain security, or financial risk control; exchange/fintech background preferred
• Strong knowledge of exchange funds flow logic and application security frameworks
• Hands‑on experience with smart contract auditing tools (e.g., Slither, Mythril, Echidna, Foundry)
• Skilled in big data analysis & risk modeling (Spark, Elasticsearch, Graph DB, ML-based anomaly detection)
• Strong offensive/defensive security mindset, cross-team collaboration skills, and ability to drive governance into practice
• Proficient in English; able to follow cutting‑edge blockchain security research

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.