Software Engineer II, End User Protection (Auth0)

The End User Protection Team

Auth0 is an easy-to-implement authentication and authorization platform designed by developers for developers. We ensure access to applications is safe, secure, and seamless for the more than 100 million daily logins worldwide. Our modern approach to identity enables this Tier-0 global service to deliver convenience, privacy, and security, allowing customers to focus on innovation.

The End User Protection team is responsible for building and maintaining Auth0’s Attack Protection capabilities. Cyberattacks, such as credential stuffing and password spraying, often target end users to gain unauthorised access to applications. These attacks pose a significant threat, compromising user accounts and data. The Attack Protection features mitigate these risks by continuously monitoring user login behaviour and automatically detecting and blocking malicious activity. They protect users without adding unnecessary friction.
The team works closely with our Machine Learning and AI teams to develop and deploy cutting-edge detection models. This collaboration allows application builders to provide a secure login experience for their users while isolating them from the complexities and ever-evolving tactics of these attacks.

The Software Engineer II Opportunity

We are looking for a Software Engineer II to join our End User Protection team.

What you’ll be doing

• Be a part of a fast-paced, agile team.
• Design and build features using technologies such as Node.js (JavaScript/Typescript), AWS, Azure, MongoDB, PostgreSQL, DynamoDB and Kubernetes
• Participate in the technical breakdown of complex requirements into clear, modular, and actionable engineering tasks, setting the standard for project clarity and velocity.
• Participate in the engineering estimation process for medium to large -sized initiatives, effectively managing risk and communicating technical trade-offs, timelines, and dependencies to engineering and product leadership.
• Act as a key technical collaborator and influencer with internal stakeholders (e.g., Product Management, Security, Infrastructure), proactively advocate for our technical roadmaps.
• Collaborate with industry-leading experts to implement the cutting-edge of Identity Protocols and Open Standards such as OpenID Connect, OAuth and SAML
• Maintain and operate services at a large scale
• Participate in scheduled on-call rotations
• Foster a culture of technical excellence and collaborative ownership.

What you’ll bring to the role

• Practical experience using Node.js (JavaScript or Typescript) or a similar language
• Experience working on systems that are highly reliable, maintainable and scalable.
• Thorough understanding of application security and cloud security best practices
• A systematic problem-solving approach, coupled with strong communication skills and a sense of ownership and drive
• A track record of influencing engineering strategy and driving complex, multi-quarter projects to completion across organisational boundaries.
• Experience with cloud environments (AWS and Azure preferred)
• The ability to communicate your ideas and collaborate with other team members effectively in a remote working environment.
• Experience designing, analysing, and troubleshooting large-scale distributed systems
• Enthusiasm to work with and learn more about Identity Protocols such as OAuth, OIDC and SAML

And extra credit if you have experience in any of the following!

• Existing knowledge of Identity Protocols such as OAuth, OIDC and SAML
• Existing knowledge of security engineering and application security
• Proven experience and understanding of architecture principles across infrastructure platforms, security, data, integration, and application layers

#LI-HYBRID

#LI-SH1
P-1030_3414639