Coins.ph

Coins.ph operates a digital finance platform built on mobile blockchain technology, serving over 18 million users in the Philippines with support across Thailand, Australia, Brazil, and Mauritius. The platform processes cryptocurrency trading across 170+ digital assets alongside bill payments, money transfers, and QRPh transactions spanning 600,000+ merchant endpoints. That's a lot of surface area: custodial wallet infrastructure, payment rail integrations, and real-time settlement systems - all handling minimum transaction sizes as low as ₱5, which means high-frequency, low-value transaction patterns that demand reliability at scale. The threat model here is what you'd expect from a fintech handling real money for a largely unbanked population: account takeover against users who may be new to digital finance, fraud rings exploiting micro-transaction thresholds, API abuse across a merchant network that touches hundreds of thousands of endpoints, and the ever-present smart contract and custodial key management risks baked into any platform holding crypto assets. The company was founded in 2014, which means it's survived multiple crypto cycles and the regulatory pressure that comes with operating licensed financial infrastructure in Southeast Asian markets. Security work here likely spans application security across mobile and backend systems, infrastructure hardening for blockchain integrations, fraud detection engineering, and compliance-adjacent security controls tied to financial regulations across multiple jurisdictions. If you're looking for a role where the asset protection is literal - not theoretical - this is a shop where the crypto is real, the users are real, and the attack surface is both diverse and well-funded by adversaries who know exactly what a platform like this holds.