I recently had a 45-minute phone interview for a Security Engineer role at Amazon, but unfortunately, I didn’t make it to the next round. The interview was quite technical and covered topics like encryption, cloud security best practices, and AWS-specific services. I was asked to walk through how I’d secure a cloud-based web application and respond to security incidents. There were also questions about handling data breaches and the principles behind securing APIs. Despite preparing extensively, I stumbled a bit on a scenario-based question about threat modeling, which may have contributed to my rejection.