Wallet & Crypto Security Engineer

Coins.ph; Singapore; On-site; SGD 90,000 - 150,000; Full time

Job summary

Coins is seeking a security-focused Web3 professional to lead wallet security architecture and MPC governance across cold, warm, and hot wallets. You will ensure compliance with top-tier standards like FIPS 140‑2/3 and manage disaster drills to minimize single points of failure.

You will also harden node security for BTC/ETH/TRON ecosystems and audit interactions with external contracts to mitigate on‑chain risks. A background in blockchain security and 1–3 years of Web3 experience is required.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Cryptography, Software Engineering, Blockchain or related majors, with 1–3 years of Web3 or blockchain security experience.
• Familiar with cryptography principles, key management and encrypted storage; knowledge of FIPS 140‑2/3 standards and wallet architecture.
• In-depth knowledge of MPC, TSS threshold signature and on‑chain multi‑signature mechanisms; experience with disaster recovery and risk investigations.
• Experience with public chains (BTC, ETH, TRON) node operation, RPC security hardening and on‑chain attack prevention.
• Familiar with common smart contract security vulnerabilities and able to perform contract interaction audits.

Responsibilities

• Wallet architecture security construction: lead and maintain security architecture of cold, warm and hot wallets and ensure compliance with industry standards.
• MPC & Multi‑Signature strategy management: manage security policy configuration, permissions and isolation for MPC wallets and multi‑sig contracts; conduct disaster recovery drills.
• On‑Chain Transaction & Node Security: harden and maintain full nodes and RPC interfaces for major blockchains, defend against node hijacking and unauthorized access.
• Smart Contract Interaction Review: audit security of interactions with external contracts (USDT, USDC, DEXs) to prevent vulnerabilities.

Skills

Cryptography basics

MPC / TSS security

Public chain node security

Smart contract security

Risk assessment & incident response

Education

Bachelor’s degree in Computer Science or related

Job description

Coins is the most established crypto brand in The Philippines and has gained the trust of more than 18 million users. Through the easy-to-use mobile app, users can buy and sell a variety of different cryptocurrencies and access a wide range of financial services.

Coins is fully regulated by the Bangko Sentral ng Pilipinas (BSP) and is the first ever crypto-based company in Asia to hold both Virtual Currency and Electronic Money Issuer licenses from a central bank.

Responsibilities

• Wallet Architecture Security Construction: Lead and maintain the security architecture of the company’s cold, warm and hot cryptocurrency wallets. Standardize the full lifecycle of private key generation, storage, usage, backup and destruction, and ensure the entire system complies with top-tier industry security standards including FIPS 140-2/3


• MPC & Multi‑Signature Strategy Management: Manage security policy configuration, permission grading and isolation for MPC (Multi-Party Computation) wallets and multi‑sig smart contracts. Conduct regular disaster recovery drills to eliminate single points of failure, permission abuse and internal malicious risks


• On-Chain Transaction & Node Security: Conduct security hardening and daily operation and maintenance for full nodes and RPC interfaces of mainstream public chains including BTC, ETH and Tron, defending against node hijacking, Sybil attacks, unauthorized access and other underlying security threats


• Smart Contract Interaction Review: Audit the security of business system interactions with external smart contracts such as USDT, USDC and DEXs. Identify and prevent common on‑chain vulnerabilities including approval phishing and reentrancy attacks to avoid asset security risks

Requirements

• Bachelor’s degree or above in Computer Science, Cybersecurity, Cryptography, Software Engineering, Blockchain or related majors, with 1-3 years of working experience in Web3 or blockchain security


• Familiar with basic cryptography principles, proficient in core logic of public and private key management and encrypted storage, familiar with FIPS 140-2/3 standards and cold/hot wallet architecture


• In-depth knowledge of MPC, TSS threshold signature and on‑chain multi‑signature mechanisms, with hands‑on experience in permission control, disaster recovery drills and risk investigation


• Familiar with the underlying logic of mainstream public chains (BTC, ETH, TRON), with practical capabilities in public chain node operation, RPC interface security hardening and on‑chain attack prevention


• Familiar with common smart contract security vulnerabilities, able to independently complete contract interaction security audits, risk assessment and problem rectification


• Strong security risk awareness and sense of responsibility, rigorous and meticulous working attitude, with in‑depth understanding of digital asset and private key security. Experience in wallet security at large platforms is preferred

Meaningful Collaborations - The successful candidate will work cross‑functionally with other relevant teams to carry out implementations that will improve and create an impact on customer experience.

Scalable Growth - Be part of a fast‑growing organization with the vision to expand its territories outside APAC which will provide opportunities for career advancement.

A Space For Bright Ideas - Let your bright ideas be converted into meaningful changes! Coins culture welcomes new ideas backed up by data to create an impact.

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.