Coins.ph is hiring a Security Engineer （Penetration Testing-Red Team） in Security — Shenzhen. The overview below is synthesized from the employer posting on jobs.lever.co: factual requirements and scope are preserved, but prose is rewritten with editorial context. Verify details and apply via the employer link.
Join the Pioneer Crypto Brand in the Philippines!
Coins is the most established crypto brand in The Philippines and has gained the trust of more than 18 million users. Through the easy-to-use mobile app, users can buy and sell a variety of different cryptocurrencies and access a wide range of financial services.
Coins is fully regulated by the Bangko Sentral ng Pilipinas (BSP) and is the first ever crypto-based company in Asia to hold both Virtual Currency and Electronic Money Issuer licenses from a central bank.
Join the Pioneer Crypto Brand in the Philippines!
Coins is the most established crypto brand in The Philippines and has gained the trust of more than 18 million users. Through the easy-to-use mobile app, users can buy and sell a variety of different cryptocurrencies and access a wide range of financial services.
Coins is fully regulated by the Bangko Sentral ng Pilipinas (BSP) and is the first ever crypto-based company in Asia to hold both Virtual Currency and Electronic Money Issuer licenses from a central bank.
Job Responsibilities：
Day-to-day scope for the Security Engineer （Penetration Testing-Red Team） as described in the posting:
- Conduct comprehensive penetration testing on company applications and systems, and organize regular attack-defense drills.
- Test and bypass the defense technologies of the company's blue team to enhance the security protection level.
- Research offensive and defensive technologies, track and analyze cutting-edge industry technologies, and introduce excellent security technologies and tools.
- Participate in the construction of security capabilities, including detection rules, monitoring strategies, and intrusion traceability.
- Build and drill countermeasures and TTPs (Tactics, Techniques, and Procedures) based on real threat intelligence and industry APT behavior models.
Requirements
Experience and skills the team lists as required:
- Possess more than 5 years of practical experience in attack and defense, and be able to independently complete penetration testing work.
- Familiar with common internal network attack ideas and methods, have internal network penetration and domain penetration capabilities with successful cases.
- Have practical experience in AWS cloud environment penetration, container and Kubernetes security attack and defense.
- Familiar with Linux/Windows system principles, databases and related technologies, and proficient in command execution and privilege escalation techniques.
- Familiar with mainstream Web frameworks and capable of code auditing and vulnerability mining (java/go/python).
- Have practical experience in red and blue team exercises.
- Be able to write scripts or tools for automated exploitation and basic tool development.
Join the Coins Team Now!
Meaningful Collaborations - The successful candidate will work cross-functionally with other relevant teams to carry out implementations that will improve and create an impact on customer experience.
Scalable Growth - Be part of a fast-growing organization with the vision to expand its territories outside APAC which will provide opportunities for career advancement.
A Space For Bright Ideas - Let your bright ideas be converted into meaningful changes! Coins culture welcomes new ideas backed up by data to create an impact.
Build a standout application
For the Security Engineer （Penetration Testing-Red Team） at Coins.ph, reviewers look for concise evidence over buzzwords. Mirror the language of the posting sparingly, quantify support or delivery outcomes, and show how you handled ambiguity, time-zone collaboration and user empathy. Keep your resume to impact, keep your cover note to one page, and link to artifacts — tickets resolved, docs shipped, dashboards owned — that prove you can operate in a fast-moving Web3 team. Prepare to discuss a time you turned a confusing user report into a clear fix and how you measure quality in support and operations.
Web3 hiring values reliability: on-time follow-through, clear writing, and a track record of improving runbooks and tooling. Treat the application as a work sample. For interviews, be ready to walk through how you prioritize across time zones, handle a difficult user, and decide when to escalate versus resolve directly. Show how you document decisions so the next teammate benefits.
In a distributed Web3 org, trust builds through written clarity. Use the cover note to demonstrate it.