Coins.ph is hiring a

Web3 Head of Payment Security & Transaction Integrity

Coins is seeking a senior leader to establish and own our Payment Security and Transaction Integrity function.
This role is responsible for protecting the integrity of payment flows across QRPH, Wallet, Merchant Payments, Crypto-Fiat rails, and future payment products.
Unlike traditional cybersecurity roles, this position focuses on business logic vulnerabilities, payment fraud, transaction manipulation risks, settlement integrity, and adversarial testing of payment systems.

• Review and approve payment flow designs before production launch
• Conduct payment threat modeling for all new payment products
• Define secure transaction integrity standards
• Establish source-of-truth and immutable payment context frameworks

• Prevent amount tampering, currency manipulation, replay attacks, merchant spoofing, and settlement abuse
• Build transaction verification controls and payment validation mechanisms
• Define critical payment control requirements across all payment products

• Establish a Payment Red Team program
• Simulate malicious user behavior against payment systems
• Conduct business logic attack testing and abuse-case validation

• Lead investigations of payment-related security incidents
• Conduct root cause analysis and drive remediation
• Build a payment incident review and governance framework

• Partner with Fraud, Risk, Operations, Compliance, and Engineering teams
• Design monitoring and alerting frameworks for transaction anomalies
• Reduce financial losses caused by abuse, fraud, and system weaknesses

• Chair Payment Security Review Board
• Define payment security standards and launch approval processes
• Create risk acceptance and escalation frameworks

• 8+ years in payments, fintech, acquiring, banking, or transaction risk
• Deep understanding of payment systems, merchant acquiring, settlement, reconciliation, and transaction processing
• Experience with payment fraud, transaction abuse, or payment security
• Strong understanding of business logic vulnerabilities and adversarial thinking
• Ability to work across Engineering, Risk, Compliance, and Operations teams