Chan Zuckerberg Initiative Security Engineer interview questions

Most interviews at most companies are neutral, or a good experience. However, this was one of the lowest quality interviews I’ve seen in over ten years, and is the only time I’ve written a Glassdoor review because I’m blown away by how awful this experience was. The company itself seems to be great. I definitely believe in what they do. However, it also claims to be all about diversity and inclusion and equality, but their entire security team is made up of white males who refuse to consider a different perspective than the one they’re currently stuck with. There was no opportunity to discuss my experience in depth, nor any ability to show my skill set as they focused on mostly irrelevant questions and practices. The hiring manager knows exactly what he wants and won’t change his mind or consider any other perspectives, so the interview process is completely one-sided and mostly irrelevant. For a security engineer role, they: - Gave two leet code style challenges with very badly written instructions which had to be repeatedly clarified as it wasn’t clear. The code interview lady cringed repeatedly when I asked her questions. Second review was a code pairing, and is not something most security engineers are used to. - Asked about graphical optimization techniques for front-end web development, and several other equally-irrelevant questions that were more geared towards a professional software engineer who focuses on leet code and optimization techniques, not actual security. - Discussed having standups 3 times per week. The hiring manager gave the impression that he needs to be in control. Standups, instead of 1:1s, are a good indicator that you wouldn’t be trusted to do the work you’re hired to do, and that the manager will be breathing down your neck instead of giving you room to swim. I listened to what he hoped to achieve and came away with the impression that he’s in over his head. For example, he placed an extreme focus on mass-deploying CSP in an era where nearly all modern web frameworks handle XSS protection at scale — and you have to try really hard to break it. The manager appears to be either looking for a software engineer, or is very inexperienced with modern security at modern companies at modern scale.