Bio
Eva Sarafianou is a Senior Product Security Engineer at Auth0 and a member of the Node.js Security Ecosystem Working Group. At Auth0, she is working closely with Engineering teams responsible for Auth0’s Session Management, and Identity protocols (OAuth2, OIDC, etc) performing security reviews, threat models and integrating security tools into the teams’ workflows. She’s also working on Auth0’s Vulnerability Management and Bug Bounty program and on the development of security tools and libraries. Eva is passionate about JavaScript security and as a member of the Node;js Security Ecosystem Working Group she helps run the Node.js Ecosystem bug bounty & responsible disclosure program. In the past, Eva worked as a Security Researcher on Cryptography and has presented her work in major conferences like Black Hat and Real World Crypto.