Cloud Security Engineer

Join the Pioneer Crypto Brand in the Philippines!Coins is the most established crypto brand in The Philippines and has gained the trust of more than 18 million users. Through the easy-to-use mobile app, users can buy and sell a variety of different cryptocurrencies and access a wide range of financial services.Coins is fully regulated by the Bangko Sentral ng Pilipinas (BSP) and is the first ever crypto-based company in Asia to hold both Virtual Currency and Electronic Money Issuer licenses from a central bank.

Responsibilities

Lead security architecture assessment and hardening for cloud platforms (primarily AWS); define and maintain cloud security baselines, policies, and standards

Continuously monitor the security posture of the cloud environment (IAM, networking, storage, compute, etc.); identify, analyze, and assess security vulnerabilities and configuration risks, evaluating their severity and business impact

Own the vulnerability remediation lifecycle end-to-end: define remediation plans and priorities, guide and drive engineering and operations teams to complete fixes, and track and verify remediation outcomes

Build and improve cloud security monitoring, alerting, and automated detection mechanisms (e.g., CSPM, CNAPP tools)

Participate in security incident response, producing root cause analyses and improvement recommendations

Produce security assessment reports and communicate cloud risk posture to management

Requirements

• 5+ years of experience in cloud security or information security, including at least 3 years focused on AWS environments
• Strong command of core AWS services (IAM, VPC, S3, EC2, KMS, CloudTrail, GuardDuty, Security Hub, etc.) and their security best practices
• Solid vulnerability identification and risk assessment skills; familiarity with common cloud security frameworks (CIS Benchmark, NIST, MITRE ATT&CK for Cloud)
• Proven experience driving remediation efforts across teams, with strong communication and project coordination skills
• Familiarity with at least one CSPM/CNAPP tool (e.g., Wiz, Prisma Cloud, AWS Security Hub)
• Scripting/automation skills (Python, Terraform, CloudFormation, etc.) are a plus