interview vs real work is different. FAANG engineers are not flipping a binary tree either, yet this is a common question they ask.
as for Burp Suite - why would a company keep engineer full-time only for him to run burp suite for 30 minutes once a month? Sounds like poor investment on a company's side.
> interview vs real work is different.
...or, and hear me out, maybe some companies are more proactive about their security. Craziness, I know, but maybe!
> why would a company keep engineer full-time only for him to run burp suite for 30 minutes once a month?
Uh, I was doing other things the other 159.5 hours a month.
so you agree that it is cheaper and better to ask SRE team to run BurpSuite for 30 minutes once a week, rather than hiring FTE to do that?
My recent interview as a security engineer had distinct sections for software review and for architecture analysis. My last job had me running Burp Suite once a month (because it was fun and I didn't mind doing it), but that was roughly 30 minutes every 4 weeks.
Sounds like you've worked with some quite junior security teams.