Three coding challenges through Hackerank. 120 mins online. You can choose the language. For Front end it is Javascript and for Backend is Java. The coding challenges are equivalent to Leetcode Medium to Hard.
I applied through an employee referral. The process took 2 months. I interviewed at Canva (Sydney) in May 2024
Interview
Round 1 - Medium-level Leetcode challenge along with some security-related multiple-choice questions.
Round 2 - Interview with two security engineers, consisting of a threat modelling technical test followed by behavioral questions.
The interview process was smooth, and communication from HR was good. However, the technical tests were poorly designed. Emphasizing Leetcode in Round 1 for a security role is puzzling.
The final interview was conducted by 2 junior engineers almost fresh out of university. I've attended dozens of interviews and you always get to meet the hiring manager at the very least. It shows you that the company values you and thinks you are important. How can two junior staff that are less than 2 years into the industry effectively evaluate candidates...?
The instructions for the threat modelling test was so confusing I swear it felt more like a cognitive ability test than a security engineering test. The actual test however, was rather easy once you understood the scenario. Just read up on Owasp top 10 and identify vulnerabilities in the presented web app.
The behavioral interview consists of standard "Tell me about a time..." type of questions that every other company in the world has reused for the past 20 years. Just Google "Top 20 HR interview questions" and rehearse a bunch of them and you'll do well here.
Interview questions [1]
Question 1
Identify vulnerabilities in the presented web application.
screening interview with HR > portfolio review with designers > design challenge presentation with manager/designer> final interview
all interviewers are friendly and open to listen. HR team is very helpful for preparing next interviews.