Applications Security Engineer Interview Questions | Glassdoor

Applications Security Engineer Interview Questions


Applications security engineer interview questions shared by candidates

Top Interview Questions

Sort: Relevance Popular Date

I was asked about XSS, SQL Injection, Tools I have used for pen testing.

1 Answer

Cross-site scripting (XSS) is a type of computer security vulnerability typically found in Web applications. XSS enables attackers to inject client-side script into Web pages viewed by other users. A cross-site scripting vulnerability may be used by attackers to bypass access controls such as the same origin policy. - SQL injection is a code injection technique, used to attack data-driven applications, in which malicious SQL statements are inserted into an entry field for execution (e.g. to dump the database contents to the attacker).

What games do you play besides League of Legends and why do you like them?

1 Answer

Can you computer?

1 Answer

Very basic stuff What is authentication vs Authorization Name spaces OAuth Threat modelling

Q: Explain how SSL/TLS work (with various in-depth follow-up questions)?

Q: How would you approach developers about adopting secure coding practices?

What's the shortest amount of time that you've seen between code submission and production? How would you implement security in our development cycle? What tools do you use?

110 of 14 Interview Questions