I cleared all interview rounds successfully.
L1 covered fundamentals like OWASP Top 10, secure coding, and application security basics.
L2 was a hands-on practical round where I demonstrated exploitation techniques such as IDOR, SSRF, and misconfigured access controls in a real-world-like environment.
L3 included both technical and managerial discussions, where I explained my approach to threat modeling, remediation strategy, and communicating risks to developers and leadership.