They are asking hard questions actually. You have to answer all of them to pass. I couldnt give an answer for 2 questions and got rejected. But the questions were really cool.

Call with recruiter, online 3hr web security challenge, and technical interview. Technical interview questions on reverse engineering, thick clients, web, android. Basic fundamental questions with in depth follow-ups going into exploit development, mitigations, and drilling down into fine details. Questions were fair, nothing unexpected. General knowledge, practical understanding, and communication skills. Seems there’s a very specific type of person they like to hire