Security Researcher - Authentication and Authorization

Huawei Canada has an immediate 12- month contract opening for a Security Researcher.

About the team:

The Digital Trust Lab is dedicated to ensuring user data flows while maintaining privacy. Researchers focus on key areas such as user identity authentication, data integrity, privacy protection, extensive model privacy assessment, multi-modal data identification, differential privacy, and federated learning. The lab supports deep research and encourages publications in leading journals. Research outcomes are applied across various Huawei product lines, including mobile phones, smart devices, and communications technologies.

About the job:

• Participate in the research of authentication and authorization mechanisms in endpoint devices.

• Participate in the proposing, designing, and prototyping of innovative authentication and authorization technologies for Huawei Endpoint products.

• Producing insights into technology development in both academia and industry.

• Work closely with other research labs worldwide and product teams to optimize the solution and deliver concrete impact to real products.

About the ideal candidate:

• PhD Degree in Computer Science or Computer Engineering, or Master Degree with 4+ years experience in related fields.

• Deep understanding of popular authentication and authorization frameworks such as OpenID Connect, SAML 2.0, FIDO2, TOTP, OAuth 2.0, Kerberos, NTLM, etc.

• Deep understanding of mobile and desktop application security, particularly in the field of authentication and authorization, with proven experience in dynamic authentication and multi-factor authentication (MFA).

• Good understanding of cryptography: symmetric-key cryptography (block ciphers, MAC, and authenticated encryption), public-key cryptography (digital signatures, encryption, and key establishment).

• Proven proficiency in at least one of the following programming languages: C++/C, Java, and Python.

• Experience with machine learning and deep learning is an asset.

• Experience with AI agents and their protocols such as A2A, MCP, ANP, and AP2 is an asset.

LI-MB1