The content is a critique of a job interview experience at a Log Analytics company for a senior application security engineer role. The author describes a two-round interview process:
- Round 1: A 20-minute online quiz with both relevant and irrelevant questions. The author was shortlisted for the second round.
- Round 2: An interview with a junior DevOps engineer, who lacked a security background and asked for a resume walkthrough and reasons for job changes. This round included a Capture The Flag (CTF) task that involved hacking a login page, which the author found unrealistic and unrelated to actual pentesting.
The author expresses frustration with the interview process, particularly the focus on a junior DevOps engineer conducting a security interview and an impractical CTF task. The unrealistic scenario involved accessing an admin page without any request body, which the author finds nonsensical.
Despite being highly experienced with certifications and extensive pentesting background, the author felt their skills were not adequately assessed. They criticize the company for wasting time and designating an interview process that does not accurately evaluate the necessary skills for the role. The author concludes by dismissing such companies as undeserving of skilled professionals.
Go here to read the Original Post