Bishop Fox Interview Questions
& Process

The selection process kicks off with a chat with HR where they'll ask about your work history, education, salary needs, and why you're keen on this role and the company. They'll also check your availability, flexibility, and if you're a good team player who can solve problems and adapt. Next up is an interview with the Operations team. They want to know about your pentesting tools and methods, your experience with different systems (AD, Linux, Windows, cloud, IoT), and how you handle exploitation and post-exploitation. They're also interested in your reporting skills, best practices, and if you have experience in Red Teaming, Threat Intelligence, or vulnerability management. After that, you'll meet with the Project Manager for some case studies on incident response or past pentests. They'll gauge your strategic thinking, how you handle attacks, your project delivery expectations, and your communication skills with clients and internal teams. They also want to see how you manage time and priorities. Finally, there's a technical hacking challenge where you'll exploit vulnerabilities in a controlled setup, try to gain privileges or evade detection, move laterally in a network, bypass security measures like WAFs and firewalls, and then create a report with your findings and recommendations.

I had a recruiter call and then a hiring manager interview. They had me do a data analysis and present it to a panel. The recruiter didn't have pay details and asked for my expectations, which I gave. I felt like there were chances they wouldn't proceed with me. Instead, they had me spend time on their data analysis and presentation. Then they told me I was too senior and pay was too high. The recruiter went silent for two weeks, which isn't great after asking for a big time investment. It felt like they wanted to understand the role and decide on pay after seeing candidates. It seemed unprofessional and disorganized.

First, a 10-minute Recruiter call to go over your experience and background. Then, a 1-hour call with the Hiring Manager asking about why you're interested in Bishop Fox and behavioral questions. The interviewer talked for the first 10 minutes. They mentioned the internal organization is disorganized and chaotic. Product managers there have to automate manual processes and create the work-breakdown structure for engineering. The only internal success metric is revenue, and it's a low product maturity organization.

The interview process had 4 parts. First, an HR/screening interview to introduce myself and see if it was a good fit. Second, a technical interview covering crypto, web, and network topics. Third, a cloud application pentest. Fourth, a final interview to discuss my report. Overall, the experience was very negative. After I passed everything, they initiated a background check that included all my previous employers. I received an offer which I accepted, but after 3 months of follow-ups, they decided not to proceed. It was a huge waste of time, showing a complete lack of respect and unprofessionalism. Don't bother with this company.