If any of you penetration testers out there see a job posting for Remote Sr. Penetration Tester for Express Scripts. I would like to highly caution any of your interactions with this company. During the interview process not only did they request an excessive level of information, but they also demanded an inappropriate amount of information about my previous employers and clients. This included lists of their customers, projects, confidential work performed etc. Over the last 3 weeks they have shown to be dangerously incapable of securely handling employee/candidate PII and when contested they responded back by threatening to rescind their offer. After passing a drug test, criminal background check, credit check, and employment history check, they decided to rescind their offer (one day before the start date) because I refused to give a copy of my personal and business taxes and I refused to violate an NDA with a previous client.
This is situation is partially my fault for not taking the warning signs more seriously. Their BBB reviews and Glassdoor reviews should have been a dead giveaway that they do not respect their customers and do not care for their employees.