// tech / security
Investigate auth anomalies, triage CVEs, and close security gaps before they become breaches. Spend 30–60 minutes inside a realistic security engineer simulation — Slack threads, tickets, code review, and a hidden challenge that mirrors what actually happens on the job.
New accounts get 14 days of Pro free · unlimited simulations · no card required.
9:00 AM
Security standup
Brief the security team on the anomaly — share initial observations and establish investigation priorities before the 10:30 CTO call
9:30 AM
Log analysis
Analyze auth service logs to characterize the anomalous JWT events — check algorithm headers, IP sources, and what endpoints were accessed
11:00 AM
Vuln triage
Review Devon's fix PR and the vulnerable verify.js — confirm the root cause mechanism and identify what else needs to change
2:00 PM
Incident response plan
Document root cause, blast radius, containment actions taken, and prevention steps in the SEC-47 runbook before the 3pm compliance deadline
4:00 PM
Stakeholder briefing
Send Elena the written CTO brief: root cause, timeline, data exposure scope, fix deployed, and prevention measures
4:55 PM
End of day
Trying to log off — the CEO got caught in this quarter's phishing sim and DMs asking to scrub his name from the report before Monday's board meeting.
Anomalous admin auth: 23 successful events for non-existent user IDs, JWT forgery suspected
Patch JWT algorithm enforcement + rotate RSA key pair — zero-downtime
JWKS endpoint access control audit — public exposure assessment
Elena M.
Security Lead
Devon T.
Platform Engineer
Priya K.
Compliance Manager
Daniel Hayes
CEO / Founder
Scorecard
Technical, communication, and collaboration scores plus a letter grade — instantly after the workday ends.
Hiring manager feedback
A written debrief explaining what you did well and what would have raised concerns in a real interview loop.
Verified certificate
Shareable LinkedIn certificate that links back to your scorecard — proof you can perform, not just answer questions.
Behavioral signals
Did you communicate proactively, escalate when needed, prioritize correctly under pressure? All measured.
New accounts get 14 days of unlimited Pro access — no credit card required.
Start Security Engineer simulation