The tech interview w/ hiring manager was the most rigorous. What's the difference between TLS and SSL. How does SSL work? How do I know a certificate is valid? How would I MitM SSL traffic? Where would I look for artifacts of persistence on a Windows machine? Describe the registry. Describe the different reg. hives, when does each come into play. Here's a packet capture (showed a wireshark screen via screen share), tell me what you see. The interviews, all of them went well, I was headed to offer, then the acquisition by Google closes and they ghost me. No formal ack of "the acquisition changed everything", just a generic "check back with us in a few weeks". I was fired up, ready to join Mandiant.