---
title: 'Application Security Engineering Manager at Coins.ph'
canonical: 'https://feeny.ai/job/application-security-engineering-manager-coins-ph-taguig-j9sp3m3me0e5'
type: 'job'
last_seen: '2026-09-07'
---

# Application Security Engineering Manager at Coins.ph

- **Company:** Coins.ph
- **Location:** Taguig, Philippines
- **Employment:** full-time
- **Work type:** hybrid
- **Posted:** 2026-04-09
- **Last confirmed live:** 2026-09-07
- **Apply:** https://jobs.lever.co/coins/7c7f4c88-8fee-4579-8bad-4f8302e65c95

## Job description

Join the Pioneer Crypto Brand in the Philippines!

Coins is the most established crypto brand in The Philippines and has gained the trust of more than 18 million users. Through the easy-to-use mobile app, users can buy and sell a variety of different cryptocurrencies and access a wide range of financial services.

Coins is fully regulated by the Bangko Sentral ng Pilipinas (BSP) and is the first ever crypto-based company in Asia to hold both Virtual Currency and Electronic Money Issuer licenses from a central bank.

## Key Responsibilities

As an Application Security Engineering Manager, you will be the core leader of the company’s application security team, responsible for formulating and implementing the company’s application security strategy and technical roadmap. You will lead the team to build a full-lifecycle application security system covering requirements, design, development, testing, deployment, and operation, focusing on identifying and mitigating security risks of core business systems in digital currency trading and payment scenarios. This role requires in-depth understanding of application security technologies, rich team management experience, and familiarity with global regulatory requirements for digital assets and payment security, to ensure the security, stability, and compliance of the company’s application systems.

## Key Responsibilities

1. Application Security Strategy & System Construction

- Formulate the company’s long-term and short-term application security strategy, technical roadmap, and implementation plan, combining the company’s business development goals, risk control requirements, and regulatory compliance needs.

- Lead the construction, optimization, and iteration of the application security system, including security development lifecycle (SDLC) management, vulnerability management, security code review, penetration testing, and security monitoring, to ensure the system’s comprehensiveness and effectiveness.

- Establish and improve application security standards, specifications, and operation processes, including security coding standards, security test standards, and vulnerability handling processes, to standardize the application security work of the entire company.

- Track the latest application security technologies, vulnerabilities, and attack methods, introduce advanced security tools and technical solutions, and continuously improve the company’s application security defense capabilities.

1. Team Management & Development

- Build, manage, and develop the application security engineering team, formulate team OKRs, performance assessment standards, and talent training plans to improve the team’s professional capabilities (security code review, penetration testing, vulnerability research, etc.).

- Arrange daily work assignments for the team, supervise work progress, solve technical difficulties in application security, and create a positive and collaborative team atmosphere.

- Guide team members’ professional growth, organize technical training, security skill exchanges, and vulnerability emergency response drills, and cultivate a professional application security talent echelon.

- Manage team performance, conduct regular performance reviews, and motivate team members to achieve work goals and improve work quality.

1. Application Security Risk Management & Control

- Lead the team to conduct application security risk assessments for core business systems (digital currency trading platform, payment system, user authentication system, etc.), identify potential security risks and vulnerabilities, and formulate targeted risk mitigation plans.

- Promote the integration of security into the entire SDLC, conduct security reviews in the requirements and design phases, perform security code reviews and penetration testing in the development and testing phases, and implement security verification in the deployment phase.

- Establish and manage the vulnerability management system, track the discovery, classification, remediation, and verification of vulnerabilities, ensure that high-risk vulnerabilities are handled in a timely manner, and reduce security risks.

- Respond to application security incidents (such as code vulnerabilities, data leakage, and attack incidents), organize the team to conduct emergency disposal, investigate the root cause, and formulate prevention measures to avoid recurrence.

1. Compliance & Regulatory Support

- Ensure that application security work complies with global regulatory requirements (FATF, MiCA, local regulations) and industry standards (such as ISO 27001, PCI DSS), and meets the security and compliance requirements of digital currency and payment businesses.

- Cooperate with the compliance team to complete application security-related compliance audits, risk assessments, and regulatory reporting, and provide relevant technical materials and explanations.

- Participate in the formulation and improvement of the company’s information security compliance system, and promote the implementation of application security compliance requirements in all business links.

1. Cross-departmental Collaboration & Security Promotion

- Communicate closely with R&D, product, testing, operation, and compliance departments to promote the integration of application security into business processes and ensure that security requirements are implemented in each link.

- Provide application security technical support and guidance for R&D teams, including security coding training, vulnerability remediation guidance, and security solution consultation.

- Promote enterprise-wide application security awareness training, improve the security awareness of employees in all departments, and reduce security risks caused by human factors.

- Cooperate with the network security, data security, and other teams to build a comprehensive information security defense system and ensure the overall security of the company’s business.

## Requirements

- Experience: 8+ years of application security or related work experience, including 3+ years of senior application security team management experience; preferred experience in fintech, digital currency, payment, or blockchain industries. Deep understanding of the application security risks and characteristics of digital currency trading and payment systems.

- Professional Expertise:

- Proficient in application security technologies, including security code review, penetration testing, vulnerability research, SDLC security management, and application security monitoring.

- Familiar with common application security vulnerabilities (OWASP Top 10) and attack methods, and have rich experience in vulnerability discovery and remediation.

- Proficient in at least one programming language (Java, Python, Go, etc.), able to conduct security code review and customize penetration testing tools.

- Familiar with application security tools (such as SAST, DAST, IAST, vulnerability scanners) and able to lead the team to use and optimize these tools.

- Understanding of global regulatory requirements (FATF, MiCA, etc.) and industry standards (ISO 27001, PCI DSS) related to digital assets and payment security.

- Leadership & Management: Excellent leadership and team management capabilities, able to build and lead a high-performance application security team; strong cross-departmental coordination and resource integration capabilities.

- Analytical & Problem-Solving: Strong security sensitivity and analytical thinking, able to quickly identify application security risks and provide effective solutions; have experience in handling major application security incidents.

- Communication Skills: Excellent oral and written communication skills in both Chinese and English, able to effectively communicate with senior management, R&D teams, and regulatory authorities.

- Education: Bachelor’s degree or above in Computer Science, Information Security, Network Security, or related fields; relevant professional certifications (such as CISSP, CISM, CEH) are preferred.

## Preferred Qualifications

- Has experience in building application security systems for compliant digital currency exchanges or payment institutions.

- Familiar with the security architecture of digital currency trading platforms, payment systems, and blockchain-related applications, and has experience in solving complex application security problems.

- Has experience in leading large-scale application security projects (such as SDLC security transformation, vulnerability management system construction) and has achieved remarkable results.

- Familiar with cloud security technologies and has experience in building application security systems in cloud environments (AWS, GCP, Azure, etc.).

## About Coins.ph

## Company Overview
- **One-liner**: Coins.ph is the Philippines' most trusted crypto wallet and exchange, providing easy access to Web3, digital assets, and a broad range of financial services for both consumers and businesses.
- **Entity Type**: Private (acquired by Gojek in 2019; last funding round: Series C in 2022)
- **Headquarters**: Manila, Philippines
- **Founded**: 2014
- **Founders**: Not publicly available (founder names are not disclosed in the provided sources)

## Core Business
- **Primary industries**: Financial services, cryptocurrency exchange, digital payments, remittances, blockchain / Web3
- **Target customers**: B2C (Filipino consumers and underbanked/unbanked individuals) and B2B (financial institutions, businesses needing cross-border payments and treasury services)
- **Mission statement**: "To create an open financial system by providing everyone easy access to Web3 and digital assets" (from [coins.ph](https://www.coins.ph/en-ph/careers))

## Products & Services
- **Coins.ph Mobile App**: A cryptocurrency wallet and exchange where users can buy and sell 20+ cryptocurrencies with low minimums (₱5), plus access payments, remittances, and bill payments.
- **Coins Business Platform**: A suite for businesses and financial institutions enabling stable-powered settlements, cross-border money movement, currency conversion, digital asset access, cards, credit, investments, and treasury management — available 24/7/365.
- **Coins Remittance**: International money transfer services leveraging crypto rails to lower costs and speed up settlement.

## Market Standing
- **Valuation**: Not disclosed
- **Annual Revenue**: $33.4 million (per [LinkedIn](https://ph.linkedin.com/company/coins-ph))
- **Total Funding**: $40 million (across multiple rounds, including Series A led by Quona Capital and Series C led by Ribbit Capital)
- **Other Key Metrics**: 16+ million registered users, 7+ million monthly active users, 300+ headcount
- **Notable Investors/Partners**: Quona Capital, Ribbit Capital, Gojek (parent company, acquired Coins.ph in 2019 for $72M)
- **Growth Signals**: +15.7% YoY headcount growth (236 employees as of recent data), active job postings up +165% year-over-year; expanding beyond crypto into full-stack financial services

## Competitive Advantages
- Fully regulated by the **Bangko Sentral ng Pilipinas (BSP)** — one of the first crypto-based companies in Asia to hold both Virtual Currency and Electronic Money Issuer licenses, providing trust and compliance.
- **First-mover & brand trust**: Most established crypto brand in the Philippines since 2014, with 16M+ users.
- **Integrated with Gojek ecosystem**: Access to a larger regional network of services and capital.
- **Broad product range**: Single platform for crypto, payments, remittances, cards, credit, and treasury — reducing fragmentation for users.

## Strategic Focus
- Building the "next generation of global money movement" by merging stable-powered settlements with local payment rails to make transactions faster, cheaper, and available 24/7.
- Expanding into adjacent financial services (cards, credit, investments) and deepening B2B offerings for financial institutions.
- Scaling compliance/AML capabilities to serve a growing user base and support international expansion.

## Why Work Here
- **Culture & Flexibility**: Flexible work arrangements (hybrid/remote options reported); work-from-equipment provided; a culture built on trust.
- **Benefits**: Comprehensive HMO for employees and dependents (dental, vision, mental health support); 15 vacation days, 15 sick days, birthday leave, quarterly mental health day; continuous learning and career development programs.
- **Growth**: Fast-growing startup with 200+ active openings; yearly headcount growth of 15.7%; roles span engineering, compliance, product, sales, and operations.
- **Compensation**: Competitive base plus performance-based rewards; salary data indicates operations roles around ₱336K/month and manager roles around ₱1.32M/month (though actual offers vary).
- **Engineering culture**: Emphasis on Web3 and blockchain; product teams work on compliance/risk platforms, trading UX, and backend infrastructure.

## Sources
1. [coins.ph – Careers](https://www.coins.ph/en-ph/careers)
2. [coins.ph – About](https://www.coins.ph/en-ph/about)
3. [LinkedIn – Coins.ph](https://ph.linkedin.com/company/coins-ph)
4. [Lever – Coins.ph Jobs](https://jobs.lever.co/coins)
5. [Built In – Coins.ph](https://builtin.com/company/coinsph)

## Other roles at Coins.ph

- [Senior Tax Manager](https://feeny.ai/job/senior-tax-manager-coins-ph-singapore-hvb4nv6kv924) — Singapore
- [Partner Solutions Lead](https://feeny.ai/job/partner-solutions-lead-coins-ph-taguig-5cpg2fvkcmg2) — Taguig, Philippines
- [AI Product Manager – Cross-Border Payments](https://feeny.ai/job/ai-product-manager-cross-border-payments-coins-ph-shanghai-te3xq9pt0td1) — Shanghai, China
- [Product Manager – KYC / Compliance / Risk](https://feeny.ai/job/product-manager-kyc-compliance-risk-coins-ph-shanghai-n5gpjsmphbda) — Shanghai, China
- [Lead Product Manager – Internal Management Platform](https://feeny.ai/job/lead-product-manager-internal-management-platform-coins-ph-shanghai-hzwttvetx8mn) — Shanghai, China
- [Product Manager — Trading Experience](https://feeny.ai/job/product-manager-trading-experience-coins-ph-shanghai-k8tdmkq0yewt) — Shanghai, China
- [Senior Account Manager - Online Enterprise](https://feeny.ai/job/senior-account-manager-online-enterprise-coins-ph-taguig-fe9pjpb56rrm) — Taguig, Philippines
- [Risk Strategy Analyst](https://feeny.ai/job/risk-strategy-analyst-coins-ph-shanghai-78cqnfpgam16) — Shanghai, China
- [Cloud Security Engineer](https://feeny.ai/job/cloud-security-engineer-coins-ph-any-ctnfm7n03qxs) — Any
- [Foreign Exchange Trader (remote)](https://feeny.ai/job/foreign-exchange-trader-remote-coins-ph-shanghai-2e4kb38zbgc8) — Shanghai, China