EY
Ernst & Young Global Limited, a multinational professional services partnership.
4 Rounds
~21 Days
Medium
The Interview Loop
Recruiter Screen (30 min)
Standard fit check, behavioral questions, and resume overview.
Technical Loop (3-4 Rounds)
Deep dive into domain knowledge, coding, and system design.
Interview Question Bank
Backend Engineer
•
Technical
•
hard
How do you secure a microservice architecture? Explain how OAuth2 and JWT work in a distributed environment.
#Microservices
#Authentication
#Authorization
#JWT
Cloud Engineer
•
Behavioral
•
hard
Tell me about a time you discovered a major security flaw in a deployed architecture. What steps did you take?
#Incident Response
#Integrity
#Security
Cloud Engineer
•
Technical
•
easy
Explain the Principle of Least Privilege and how you implement it using AWS IAM or Azure RBAC.
#IAM
#RBAC
#Security
Cloud Engineer
•
Technical
•
medium
How do you securely inject database credentials into a CI/CD pipeline without hardcoding them?
#CI/CD
#Secrets Management
DevOps Engineer
•
Technical
•
medium
How do you securely inject secrets (like database connection strings or API keys) into a Kubernetes pod without hardcoding them or exposing them in environment variables?
#Kubernetes
#Azure Key Vault
#Secrets Management
DevOps Engineer
•
Technical
•
medium
How do you implement Role-Based Access Control (RBAC) in a shared Kubernetes cluster to ensure developers can only access their specific namespaces?
#Kubernetes
#RBAC
#Security
Frontend Engineer
•
System Design
•
medium
Design a secure authentication flow for a client-facing web app. How do you securely store tokens on the client side?
#Authentication
#JWT
#Security
Frontend Engineer
•
Technical
•
medium
How do you handle Cross-Site Scripting (XSS) and Cross-Site Request Forgery (CSRF) in a modern frontend application?
#Security
#Web Fundamentals
Full Stack Engineer
•
Technical
•
medium
What is CSRF (Cross-Site Request Forgery) and how do you prevent it in a modern Single Page Application (SPA)?
#Web Security
#Frontend
#Backend
Full Stack Engineer
•
Technical
•
medium
How do you implement and secure JWT (JSON Web Token) authentication in a Node.js or .NET Core backend?
#Authentication
#Backend
#JWT
Software Engineer
•
Technical
•
medium
What is a JWT (JSON Web Token)? Explain the workflow of authenticating and authorizing a user in a microservices architecture.
#JWT
#Authentication
#Microservices
Difficulty Radar
Based on recent AI-sourced data.
Meet Your Interviewers
The "Standard" Interviewer
Senior EngineerFocuses on core competencies, system constraints, and clear communication.
SimulateUnwritten Rules
Think Out Loud
Always explain your thought process before writing code or drawing architecture.