Wallet & Crypto Security Engineer

Job description

***Join the Pioneer Crypto Brand in the Philippines!*** Coins is the most established crypto brand in The Philippines and has gained the trust of more than 18 million users. Through the easy-to-use mobile app, users can buy and sell a variety of different cryptocurrencies and access a wide range of financial services. Coins is fully regulated by the Bangko Sentral ng Pilipinas (BSP) and is the first ever crypto-based company in Asia to hold both Virtual Currency and Electronic Money Issuer licenses from a central bank. ### Responsibilities: 1. **Wallet Architecture Security Construction**: Lead and maintain the security architecture of the company’s cold, warm and hot cryptocurrency wallets. Standardize the full lifecycle of private key generation, storage, usage, backup and destruction, and ensure the entire system complies with top-tier industry security standards including FIPS 140-2/3. 2. **MPC & Multi-Signature Strategy Management**: Manage security policy configuration, permission grading and isolation for MPC (Multi-Party Computation) wallets and multi-sig smart contracts. Conduct regular disaster recovery drills to eliminate single points of failure, permission abuse and internal malicious risks. 3. **On-Chain Transaction & Node Security**: Conduct security hardening and daily operation and maintenance for full nodes and RPC interfaces of mainstream public chains including BTC, ETH and Tron, defending against node hijacking, Sybil attacks, unauthorized access and other underlying security threats. 4. **Smart Contract Interaction Review**: Audit the security of business system interactions with external smart contracts such as USDT, USDC and DEXs. Identify and prevent common on-chain vulnerabilities including approval phishing and reentrancy attacks to avoid asset security risks. ### Requirements 1. Bachelor’s degree or above in Computer Science, Cybersecurity, Cryptography, Software Engineering, Blockchain or related majors, with 1-3 years of working experience in Web3 or blockchain security. 2. Familiar with basic cryptography principles, proficient in core logic of public and private key management and encrypted storage, familiar with FIPS 140-2/3 standards and cold/hot wallet architecture. 3. In-depth knowledge of MPC, TSS threshold signature and on-chain multi-signature mechanisms, with hands-on experience in permission control, disaster recovery drills and risk investigation. 4. Familiar with the underlying logic of mainstream public chains (BTC, ETH, TRON), with practical capabilities in public chain node operation, RPC interface security hardening and on-chain attack prevention. 5. Familiar with common smart contract security vulnerabilities, able to independently complete contract interaction security audits, risk assessment and problem rectification. 6. Strong security risk awareness and sense of responsibility, rigorous and meticulous working attitude, with in-depth understanding of digital asset and private key security. Experience in wallet security at large platforms is preferred.