I applied through a recruiter. The process took 2 weeks. I interviewed at Amazon in May 2020
Interview
A recruiter contacted me over the LinkedIn for Security Engineer role for their Cambridge S3 team.
- Arranged a call and well explained about the role
- It took one week to schedule the first telephone interview round
The interviewer seemed from the non-security background, hence, he asked really basic questions that even a school kid can answer.
I received automated email 2 days after the phone interview where they mentioned that they have other candidates who are just a little closer to target for this role, hence, they are not moving forward with my application.
My basic questions to recruiter
- If you already had other candidates, what was the point of approaching and rejecting more candidates?
- Why do not you respect the candidate's time? You yourself approached me, appreciated my profile, convinced me for the interview, and when everything was going well, you rejected. FYI, I'm working in this role for 7 years now. Your interview difficulty is 0.001% as compare of my security engineering role.
Interview questions [4]
Question 1
What is XSS vulnerability?
What is SQL Injection vulnerability?
I applied online. The process took 4 weeks. I interviewed at Amazon (Seattle, WA) in Apr 2020
Interview
Applied through the University portal. Got the phone screen after 1 month.
Phone screen: Security fundamental questions: OWASP top10, crypto algorithms, network protocols, one project in detail from your resume (I explained password cracker)
Virtual Onsite: 3 rounds
Round 1: Penetration testing, log monitoring, server security hardening questions (all were scenario-based)
Round 2: previous experience and projects (bar-raising round)
Round 3: With the hiring manager: Owasp 10, my research in the blockchain area, cybersecurity projects did in school and internship in detail. Scenario-based security questions. Amazon leadership principle questions
Interview questions [1]
Question 1
Security fundamental questions: OWASP top10, crypto algorithms, network protocols, one project in detail from your resume (I explained password cracker)
Penetration testing,
log monitoring,
server security hardening questions (all were scenario-based)
previous experience and projects
I applied online. The process took 4 weeks. I interviewed at Amazon in Apr 2020
Interview
First round was a phone interview with an AWS Security Engineer. It lasted an hour and covered network protocols, TLS/UDP, DNS etc and also threat modelling scenario.
I found out the next day that I had moved onto the next round (the Amazon loop) this was with 5 Amazon employees across software engineering and security teams, 1 was the hiring manager. Each round focused on behavioural questions (Amazon Leadership Principles) and technical questions. The technical questions covered usual network security questions, code review and threat modelling.
I felt a bit out of depth in some areas, but 4/5 people I interviewed with were patient and taught me something new which I appreciated. There was 1 engineer that kept interrupting me and it felt more like an interrogation than an interview at one point but maybe I just wasn’t staying inline with what they were asking.
Overall, even though I wasn’t successful I got some great advice and guidance from the interviewers. It’s a long day of interviewing (5 hours) so it’s good to get something out of it at least.
Interview questions [1]
Question 1
Go over a specific product and how to threat model for this scenario