Coins.ph
From Coins.ph's careers page
Status: listed on the employer's own careers page when we last checked (daily). Confirm on their site before applying.
Join the Pioneer Crypto Brand in the Philippines!
Coins is the most established crypto brand in The Philippines and has gained the trust of more than 18 million users. Through the easy-to-use mobile app, users can buy and sell a variety of different cryptocurrencies and access a wide range of financial services.
Coins is fully regulated by the Bangko Sentral ng Pilipinas (BSP) and is the first ever crypto-based company in Asia to hold both Virtual Currency and Electronic Money Issuer licenses from a central bank.
Responsible for the overall planning, construction, and continuous optimization of AWS cloud environment security architecture, covering account systems, IAM, VPC, compute, storage, container, and data security.
Responsible for the design, configuration, and operation of WAF and DDoS protection systems, including AWS WAF, AWS Shield, CloudFront, Route 53, and third-party security products.
Design and implement network isolation strategies, including multi-account, multi-VPC, production and non-production environment isolation, subnet segmentation, east-west access control, egress control, and zero-trust access.
Responsible for the configuration and auditing of Security Group, NACL, Transit Gateway, PrivateLink, VPN, Direct Connect, and other network security components.
Proficient in using AI technologies and tools to carry out cloud security operations, achieving cloud resource risk identification, security monitoring, anomalous behavior analysis, intelligent alert triage, and incident response automation, improving the efficiency of security threat detection and handling.
Build cloud security monitoring and response capabilities, discovering and handling security risks based on CloudTrail, GuardDuty, Security Hub, Config, VPC Flow Logs, and other tools.
Drive the implementation of cloud resource configuration baselines, vulnerability management, key management, log auditing, data encryption, and disaster recovery strategies.
Participate in cloud security incident response, attack tracing, risk assessment, and remediation tracking.
Drive infrastructure as code and security automation, integrating security checks into Terraform, CloudFormation, CI/CD, and other processes.
5+ years of experience in cloud security, network security, or cloud platform operations.
Familiar with AWS security architecture and core services, including IAM, Organizations, Control Tower, VPC, EC2, EKS, S3, KMS, CloudFront, WAF, Shield, CloudTrail, GuardDuty, Security Hub, and Config.
Familiar with TCP/IP, DNS, HTTP/HTTPS, TLS, VPN, routing, load balancing, firewalls, and common network attack and defense principles.
Able to independently design network isolation and access control solutions across multiple accounts, regions, and environments.
Familiar with WAF rule design, bot protection, API protection, rate limiting strategies, and DDoS emergency response.
Familiar with Kubernetes, container, and cloud-native security, with experience in EKS network policies, image security, RBAC, and runtime security.
Possess scripting or automation skills, familiar with at least one of Python, Go, or Shell.
Familiar with infrastructure as code tools such as Terraform and CloudFormation.
Possess good security risk analysis, troubleshooting, documentation, and cross-team communication skills.
Hold certifications such as AWS Certified Security – Specialty, AWS Solutions Architect, CISSP, CCSP, CISA, etc.
Experience with large-scale AWS multi-account governance, Landing Zone, or cross-region cloud architecture construction.
Experience with generative AI, LLM, MLOps, GPU/Kubernetes cluster security operations.
Familiar with zero trust, SASE, micro-segmentation, service mesh, and cloud-native network security products.
Familiar with security platforms such as SIEM, SOAR, CSPM, CNAPP, CWPP.
Have practical experience in security incident response, offense-defense exercises, or red-blue team confrontation.
Scores your resume against this job the way resume scanners do: the job's hard and soft skills, searchability, recruiter tips and formatting.
Create a free account to see your score. Your resume stays in this browser until then, and we never store it.
Already a member? Sign in