I cleared all interview rounds successfully. L1 covered fundamentals like OWASP Top 10, secure coding, and application security basics. L2 was a hands-on practical round where I demonstrated exploitation techniques such as IDOR, SSRF, and misconfigured access controls in a real-world-like environment. L3 included both technical and managerial discussions, where I explained my approach to threat modeling, remediation strategy, and communicating risks to developers and leadership.
