Started off with a interview with the recruiter. He was very intent on getting my current salary which is covered by a NDA and he put a lot of pressure on my to violate that NDA - huge red flag. Other than that, standard recruiter screening.
I interviewed with a hiring manager a week or so later. This went very well with some light technical discussion, a lot about the day to day work and how to deal with it.
Following that is a technical review where 3 Tanium employees get you to play stump the chump. For those that don't know, that's "the act of challenging a person in the spotlight in an attempt to make he or she appear foolish." This was exemplified by showing 6 very small code snippets (5 lines) that implemented a loop and asking me to identify the language used to code the loop. I got 2 but I'm not familiar enough with so many languages to identify it from only 5 lines of code so I missed 4 (maybe I got one other, I don't know). You'll see variables used for purposes not intended (I haven't see this kind of thing since college) so brush up on booleans, integers, and strings in addition to hashtables.
You need to walk a very fine line here as you demonstrate your technical knowledge without making it appear too advanced. For example, there is a lot of use of hashtables and one code snippet I walked through relied on error control of collisions during insertions. I asked about chaining and exploring that comment made it clear they didn't know what I was talking about. The eye rolling and other facial expressions at that time was a pretty bad sign. Consequently, restrict all your answers to only the code presented without speaking to any better way of doing it.
Be very sure you do not criticize the code presented. Being a technical review of coding ability, I made the mistake of pointing out some best practice violations and the interviewer that presented the code became *visibly* upset making a couple of snarky and derogatory comments toward me (this was the moment I knew I was not getting past this stage.).
You'll also get a lot of questions about how to monitor and handle applications that are "bad actors". This stems from the architecture of Tanium where code runs listening constantly for requests on the end point under the logged in user ID and requires a database on each end point as well (multi GB in enterprise installs). Speaking with several Tanium customers, I understand this is causing significant issues on virtual servers (this architecture is why Tanium is not available on mobile devices as it destroys battery life and data plan usage.). The interview around this issue will come off very much like a consulting session as they look for answers on how to monitor and deal with it - especially on using a third system outside of the communication chain to analyze why servers are failing. Honestly, if you talk about this more than 15-20 minutes you should consider billing them.
I did discuss salary and we settled on $140,000/year with bonuses that made total annual compensation around $200,000 (last year's bonus was $60,000). This is way out of line with industry norms, about 75% above normal market valuation at other companies, so I'm not sure what's going on with this and why, at that amount, they can't seem to fill positions.