Senior Application Security Engineering Lead

Coins.ph; Philippines; On-site; PHP 2,400,000 - 4,200,000; Full time

Job summary

Coins is seeking an experienced Application Security Engineering Manager to lead the security team in a regulated fintech environment in the Philippines. You will formulate the security strategy, oversee SDLC security, vulnerability management, code reviews, and penetration testing across digital currency trading and payment platforms.

You will mentor engineers, drive compliance with ISO 27001, PCI DSS, FATF/MiCA requirements, and collaborate with R&D, product, and compliance to scale security

Qualifications

• Bachelor’s degree in Computer Science or a related field.
• 8+ years of experience in application security.
• 3+ years in senior management/leadership.
• Experience in fintech, digital currencies, or payments preferred.
• Strong knowledge of OWASP Top 10 and security testing methodologies.

Responsibilities

• Define and implement the company’s application security strategy and roadmap.
• Lead SDLC security lifecycle, risk assessments, and vulnerability management.
• Oversee security code reviews, pentests, and security monitoring activities.
• Develop and mentor the application security team; manage OKRs and performance reviews.
• Ensure compliance with FATF, MiCA, ISO 27001, PCI DSS and other regulatory standards.

Skills

Application security

SDLC security

Vulnerability management

Penetration testing

Code review

Regulatory compliance

Leadership

Cloud security

Programming

Education

Bachelor’s in CS

CISSP/CISM preferred

Tools

SAST

DAST

IAST

Vulnerability scanners

Pentest tools

Job description

Coins is seeking an experienced Application Security Engineering Manager to lead the security team in a regulated fintech environment in the Philippines. You will formulate the security strategy, oversee SDLC security, vulnerability management, code reviews, and penetration testing across digital currency trading and payment platforms.

You will mentor engineers, drive compliance with ISO 27001, PCI DSS, FATF/MiCA requirements, and collaborate with R&D, product, and compliance to scale security