Me postulé en línea. El proceso tomó 2 semanas. Acudí a una entrevista en Doyensec en oct 2021
Entrevista
I had total of 4 interviews. First interview was about OWASP top10 and Android/iOS questions. Then I was sent a source code review task. After completing it, I had an interview about the task. They go into detail.
Preguntas de entrevista [1]
Pregunta 1
Implicit vs explicit intent. Favourite vulnerability. Sandbox iframe and its security implications.
Call with recruiter, online 3hr web security challenge, and technical interview. Technical interview questions on reverse engineering, thick clients, web, android. Basic fundamental questions with in depth follow-ups going into exploit development, mitigations, and drilling down into fine details. Questions were fair, nothing unexpected. General knowledge, practical understanding, and communication skills. Seems there’s a very specific type of person they like to hire
Preguntas de entrevista [3]
Pregunta 1
Hardware vs software breakpoints, how to bypass anti debugging
They are asking hard questions actually. You have to answer all of them to pass. I couldnt give an answer for 2 questions and got rejected. But the questions were really cool.