Auth Security Engineer: Passwordless & WebAuthn

Rublon; United States; Remote; USD 45,000 - 60,000; Full time

Job summary

Rublon is seeking a security specialist to assess and improve the security of multi-factor authentication systems, focusing on authentication flows and passwordless methods. The role combines offensive security research, hands-on testing, and collaboration with product and engineering teams to translate findings into practical security improvements.

You will assess threat models, test Windows environments and WebAuthn/FIDO2, prototype passwordless approaches, and track evolving attack techniques

Qualifications

• Practical penetration-testing or ethical-hacking experience relevant to authentication or identity systems.
• Ability to analyze authentication protocols and identify security weaknesses.
• Familiarity with Windows environments, Active Directory, Kerberos, NTLM, and WebAuthn/FIDO2.

Responsibilities

• Threat-model authentication flows and examine cryptographic design for weaknesses.
• Test systems across Windows desktops and servers, directory services, Kerberos, NTLM, and WebAuthn/FIDO2.
• Prototype and validate passwordless authentication approaches, including passkeys.
• Track new attack techniques and assess their relevance to authentication security.
• Document findings clearly and work with engineering teams to support remediation and product improvements.

Skills

Penetration testing

Authentication protocols

Threat modeling

Communicate findings

Tools

Windows

Active Directory

Kerberos

NTLM

WebAuthn

Job description

Rublon is seeking a security specialist to assess and improve the security of multi-factor authentication systems, focusing on authentication flows and passwordless methods. The role combines offensive security research, hands-on testing, and collaboration with product and engineering teams to translate findings into practical security improvements.

You will assess threat models, test Windows environments and WebAuthn/FIDO2, prototype passwordless approaches, and track evolving attack techniques