← Back to Directory

Abnormal Security

Mid-sized

Abnormal Security is a cybersecurity company specializing in cloud-based email security that uses artificial intelligence and behavioral analytics to detect and prevent advanced email attacks such as phishing, business email compromise, and account takeover. It is known for its AI-driven approach to protecting organizations from socially engineered threats.

2 interview notes · updated Jul 2026

Abnormal Security·Software Engineer·Onsite - System Design / Architecture

May 2026
System design round at Abnormal Security for a software engineer role. The whole thing was basically one giant question about scaling a deduplication system, and they went pretty deep on every layer of it.
  • How would you scale a duplicate photo detection system to handle tens of millions of files across multiple machines and storage locations?
  • What key schema would you use for the deduplication index, and how would you size memory for it?
  • How would you design the batch pipeline for scanning and hashing files at scale, and what partitioning strategy would you use to maximize data locality?
  • How do you ensure idempotency and avoid race conditions when multiple workers might process the same file simultaneously?
  • Before permanently deleting duplicates, what verification, rollback, and audit mechanisms would you put in place?
  • How would you handle fault tolerance, retries, and backpressure in this pipeline, and what metrics would you monitor?
  • How would you handle incremental runs to process newly added files without re-scanning everything from scratch?
  • How would you handle multi-tenant isolation and permission checks to make sure users can't delete files they don't own?
  • Can you give rough cost and throughput estimates for this system at tens of millions of files?

“This was the whole interview, basically.”

View Post

Abnormal Security·Software Engineer·Onsite - System Design / Architecture

Apr 2026
System design round at Abnormal Security for a software engineering role. The whole thing was one deep-dive question about deduplicating millions of photos on a single machine, and they really did want you to go all the way down to pseudocode.
  • You have a filesystem with millions of photos. Design an algorithm to detect and remove byte-identical duplicate files on a single machine. Cover how you compute and store file signatures, how you map signatures to canonical paths in memory, how you handle hash collisions before deleting anything, how you treat files that share a name but differ in content or metadata, and what the time/space complexity and I/O tradeoffs look like. Write pseudocode for a function that returns the set of paths safe to delete.

“This one sprawled in a way I didn't expect.”

View Post