I applied directly via email to the recruitment team. The process moved forward and eventually led to a 3rd-round technical panel interview with three senior consultants. The technical rounds focused heavily on manual web application penetration testing, API security, and specific vulnerability classes. While the technical panel itself was rigorous, the HR communication afterward was incredibly poor. After the final interview, I waited 11 days with zero updates. I finally had to initiate a follow-up email, only to immediately receive a highly generic, copy-pasted rejection template claiming I had "surface-level" awareness—which completely ignored my portfolio of custom Burp Suite extensions and production P1/P2 bug bounty validations discussed in the interview. The process felt disorganized, and they seem to be struggling to figure out their own hiring requirements.