Wallet & Crypto Security Engineer

Coins.ph; Hong Kong; On-site; HKD 88,000 - 163,000; Full time

Job summary

Coins.ph seeks a security-focused professional to architect and maintain wallet security across cold, warm and hot storage, ensuring key management and backups meet high standards.

You will lead MPC/multi‑sig policy, disaster drills, and daily node/RPC security for major chains while auditing contract interactions to mitigate asset risk.

Qualifications

• Bachelor’s degree or above in Computer Science, Cybersecurity, Cryptography, Software Engineering, Blockchain or related majors.
• 1–3 years of working experience in Web3 or blockchain security.
• Familiar with cryptography principles, public/private key management, and encrypted storage.
• Knowledge of MPC, TSS threshold signatures, and on‑chain multi‑signature mechanisms.
• Experience with security in public chains, node operation, and RPC security hardening.
• Familiar with common smart contract security vulnerabilities and audit processes.

Responsibilities

• Lead and maintain the security architecture for wallets (cold, warm, hot) following top-tier standards (FIPS 140-2/3).
• Manage MPC wallet policy configuration, permission grading and disaster recovery drills to reduce risk.
• Hardening and daily operation of full nodes and RPC interfaces for BTC, ETH, Tron; defend against attacks.
• Audit security of interactions with external smart contracts (USDT, USDC, DEXs) to prevent on‑chain risks.

Skills

MPC & multi-signature knowledge

Key management & cryptography basics

Public/private key management

Smart contract security basics

Node security & RPC hardening

Education

Bachelor’s degree or above in Computer Science, Cybersecurity, Cryptography, Software Engineering, Blockchain or related majors

Job description

Coins is the most established crypto brand in The Philippines and has gained the trust of more than 18 million users. Through the easy-to-use mobile app, users can buy and sell a variety of different cryptocurrencies and access a wide range of financial services.

Coins is fully regulated by the Bangko Sentral ng Pilipinas (BSP) and is the first ever crypto-based company in Asia to hold both Virtual Currency and Electronic Money Issuer licenses from a central bank.

Responsibilities

• Wallet Architecture Security Construction: Lead and maintain the security architecture of the company’s cold, warm and hot cryptocurrency wallets. Standardize the full lifecycle of private key generation, storage, usage, backup and destruction, and ensure the entire system complies with top-tier industry security standards including FIPS 140-2/3


• MPC & Multi‑Signature Strategy Management: Manage security policy configuration, permission grading and isolation for MPC (Multi-Party Computation) wallets and multi‑sig smart contracts. Conduct regular disaster recovery drills to eliminate single points of failure, permission abuse and internal malicious risks


• On-Chain Transaction & Node Security: Conduct security hardening and daily operation and maintenance for full nodes and RPC interfaces of mainstream public chains including BTC, ETH and Tron, defending against node hijacking, Sybil attacks, unauthorized access and other underlying security threats


• Smart Contract Interaction Review: Audit the security of business system interactions with external smart contracts such as USDT, USDC and DEXs. Identify and prevent common on‑chain vulnerabilities including approval phishing and reentrancy attacks to avoid asset security risks

Requirements

• Bachelor’s degree or above in Computer Science, Cybersecurity, Cryptography, Software Engineering, Blockchain or related majors, with 1-3 years of working experience in Web3 or blockchain security


• Familiar with basic cryptography principles, proficient in core logic of public and private key management and encrypted storage, familiar with FIPS 140-2/3 standards and cold/hot wallet architecture


• In-depth knowledge of MPC, TSS threshold signature and on‑chain multi‑signature mechanisms, with hands‑on experience in permission control, disaster recovery drills and risk investigation


• Familiar with the underlying logic of mainstream public chains (BTC, ETH, TRON), with practical capabilities in public chain node operation, RPC interface security hardening and on‑chain attack prevention


• Familiar with common smart contract security vulnerabilities, able to independently complete contract interaction security audits, risk assessment and problem rectification


• Strong security risk awareness and sense of responsibility, rigorous and meticulous working attitude, with in‑depth understanding of digital asset and private key security. Experience in wallet security at large platforms is preferred

Meaningful Collaborations - The successful candidate will work cross‑functionally with other relevant teams to carry out implementations that will improve and create an impact on customer experience.

Scalable Growth - Be part of a fast‑growing organization with the vision to expand its territories outside APAC which will provide opportunities for career advancement.

A Space For Bright Ideas - Let your bright ideas be converted into meaningful changes! Coins culture welcomes new ideas backed up by data to create an impact.

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.