A phone screen was conducted first by HR, then a second one by the hiring manager. The conversation was very cordial, but the questions basic and didn't test my knowledge beyond fundamentals.
The annoying part was I never really go a definitive decision on my status as a candidate. First they would get back to me in a few weeks, then the process was on hold, then the position might be pulled, and then they went dar!. How you treat a candidate says a lot about how you treat your staff and your overall ethics. I had multiple offers that summer, so they clearly don't know how to evaluate cybersecurity talent.