Basic security questions, like TCP handshakes, how does ssh work, what tools used !! Have you done threat model and code review etc. 80% of the interview was businessy questions such as: "tell me about a time you took a risk at work" etc. (I am not sure why a technical position didn't have more technical questions and less leadership questions )
Deep technical questions on offensive security.
under NDA, can't answer, sorry.
under NDA, can't answer, sorry.
Basics like SSL Handshake and Attacks.
What is your work & team structure? (Like why?)
Difference between Core XL and Secure XL? SIC Port number What is SNAT? TCP/IP Flags Troubleshooting questons.
Explain me OWASP Top 10, and pick any 3 to give details
A team wants your input an application that uses JWT tokens to access micro-services. To generate these tokens, the application needs to access a certificate stored in an S3 bucket. What best practices and recommendations should I follow to securely manage and access the certificate in this scenario?
Will you be able to train other employees (share your knowledge)? Are you willing to take care of several security testing solutions that we currently have? In what areas would you like to expand your expertise?
Viewing 221 - 230 interview questions