← Back to Directory

NASA interview notes, page 1 of 2

Large Enterprises

Screna has 13 NASA interview write-ups. The most reported round is the technical phone screen (12).

13 interview notes · updated Jul 2026

NASA·Software Engineer·Technical Phone Screen

Apr 2026
Interviewed for a security analyst role at NASA, just one scenario-based question that sounds straightforward until you actually try to defend your answer out loud.
  • You have three server types all affected by the same critical vulnerability: a public-facing server, a production database containing PII, and an internal office file share. Which do you patch first and why?

“I went with the public-facing server first because external exposure felt like the most obvious attack surface.”

View Post

NASA·Software Engineer·Technical Phone Screen

Apr 2026
NASA security analyst interview, one technical question that combined SQL/query writing with threat analysis judgment. Pretty focused session, felt more like a practical skills check than a traditional interview.
  • Write a query to detect repeated authentication failures from the same IP address within a 10-minute window, then walk through how you'd distinguish malicious activity from a user just forgetting their password.

“The query part I was fine with, window functions over a timestamp column grouped by IP, flag anything above a threshold.”

View Post

NASA·Software Engineer·Technical Phone Screen

May 2026
Interviewed for a security engineer role at NASA, and the technical questions leaned heavily on threat landscape fundamentals. Not a lot of hands-on scenario stuff, more definitional than I expected.
  • What are Advanced Persistent Threats (APTs) and how do they differ from other types of cyber threats?

“Knew the basics but fumbled explaining the 'persistent' part clearly.”

View Post

NASA·Software Engineer·Technical Phone Screen

May 2026
Interviewed for a security engineer role at NASA, got asked a classic networking fundamentals question. Nothing too wild but it set the tone for the rest of the conversation.
  • Can you explain the OSI model and its layers?

“Pretty standard for any security role.”

View Post

NASA·Software Engineer·Technical Phone Screen

May 2026
Interviewed for a security analyst role at NASA, just one question from what I can tell. Pretty standard stuff for a security screening but still had to think through it carefully.
  • How would you identify a phishing email?

“Ran through the usual signals: sender address mismatches, suspicious links, urgency language, unexpected attachments.”

View Post

NASA·Software Engineer·Technical Phone Screen

May 2026
Interviewed for a security engineer role at NASA, got asked about Kerberos attack techniques. Pretty niche stuff for a government gig but I guess it makes sense given the threat landscape they deal with.
  • Can you explain what a golden ticket attack is?

“Knew this one cold.”

View Post

NASA·Software Engineer·Technical Phone Screen

May 2026
Interviewed for a security analyst role at NASA, got a scenario-based question about triaging a SIEM alert. Pretty focused interview, felt more like a practical walkthrough than a traditional Q&A.
  • You receive a SIEM alert for a suspicious login. What data sources would you use to confirm or rule out malicious activity?

“I started with auth logs and worked outward, endpoint telemetry, network flow data, threat intel feeds, maybe identity provider logs if it's SSO.”

View Post

NASA·Software Engineer·Technical Phone Screen

May 2026
Interviewed for a security analyst role at NASA, just one question that I can remember but it was the kind of thing that sounds easy until you're actually sitting there trying to sound coherent about it.
  • What is your favorite forensic artifact and why?

“I blanked for a second because I had like five answers and couldn't pick one.”

View Post

NASA·Software Engineer·Technical Phone Screen

May 2026
Security analyst interview at NASA with a scenario-based question about investigating a specific alert type in Sentinel. Pretty focused, just the one question from what I remember, but it required you to actually think through an investigation workflow on the spot.
  • You're looking at an alert in Sentinel labeled 'EDR killer'. What does that mean to you, and how would you go about investigating it?

“I knew what EDR killers were conceptually but stumbled a bit connecting it to a concrete investigation flow in Sentinel specifically.”

View Post

NASA·Software Engineer·Technical Phone Screen

May 2026
Interviewed for a security analyst role at NASA and it was pretty much one question that set the tone for the whole thing. Simple on the surface, but they clearly wanted to see how deep you could go.
  • Walk me through everything that happens when you click on a link in a web browser.

“I started with DNS resolution and worked my way through TCP handshake, TLS negotiation, HTTP request and response, rendering.”

View Post