Security Engineer interview practice

Threat modeling, authN/authZ internals, secure defaults, and incident response — attacker-mindset questions with follow-up drilling.

Topics this interview probes

Threat modeling AuthN/AuthZ internals Secrets & key management Dependency risk Incident response OWASP depth

Threat-model a file-upload feature end to end. What are the top three risks and mitigations?
How would you design session revocation for a service with 50k concurrent users per node?
Walk me through your first 30 minutes of responding to a suspected token leak.

The live interviewer generates fresh, role-tailored questions — and drills down when your answers are vague.