Before you start
This takes 20 to 30 minutes and asks you to do a small piece of real work. That is deliberate. We would rather read fifty considered applications than five hundred generic ones, and the questions below are the ones a resume cannot answer.
Your answers save in this browser as you type, so you can close the tab and come back. Nothing is sent to us until you press the button at the bottom.
The work
Answer these in your own words. We are reading for how you think, not for length, and a generic answer is worse than a short one.
You find an unauthenticated service on a device, and the manufacturer says it is unreachable in clinical use. How do you decide whether that is a finding, and what evidence would you put in the report?
You have three days left on an engagement and you have not found anything of consequence. What do you do with the time, and what does the report say at the end of it?
You captured Bluetooth traffic from a patient monitor and the pairing exchange uses Just Works with no out-of-band confirmation. Write that finding the way it would appear in a report: what it is, why it matters for the patient, and what you would recommend. Under 200 words.
What tooling do you reach for first on an unfamiliar embedded target, and in what order? Then tell us about the last thing that had you stuck for more than a day and how it resolved.
Quick questions
Ten of them, a few minutes at most. Pick the best answer. We are not testing trivia, and getting a few wrong will not disqualify you.
We use AI every day and we expect you to. Tell us honestly how you used it on this application: which tool, on which parts, and what you changed afterwards. "I did not use it" is a completely fine answer. What we cannot work with is a no when the writing says otherwise.
Tell us something unique about you that will not show up anywhere else in this application. A hobby that got out of hand, something you build or collect or compete in, a language, a detour in your career, an unpopular opinion about our industry. Or, if you have an idea for how we should be working, tell us that instead. Optional, and there is no right answer.
How you work: our core values
Patient safety comes first here, ahead of deadlines, clients and convenience. After that we hold eight standards: role competence, client and team trust, ownership, judgment under ambiguity, growth and coachability, rigor and attention to detail, proactive risk anticipation, and innovation that never trades away what we protect. These questions are how we learn whether that is how you already work.
Give us real examples from your own work. Specific and honest beats polished.
Standard: Patient safety comes first
Tell us about a time you raised a safety, quality or compliance concern when it was inconvenient: it cost a deadline, annoyed a client or a boss, or you were not sure it was big enough to mention. What was it, who did you tell, and what happened? If you have never done this, tell us about the time you should have and did not.
Standard: 3. Ownership
Describe a gap or problem that was clearly nobody's job, which you noticed and closed. What did you do, did you ask permission first, and what changed because you were involved?
Standard: 5. Growth and coachability
What is the most useful critical feedback you have received? Quote it as closely as you can, tell us how it felt at the time, and tell us specifically what you do differently now.
Standard: 4. Judgment under ambiguity
Tell us about a decision you made without all the information you wanted. What were the two or three ways to read the situation, which did you pick and why, and in hindsight was it the right call?
Work sample file
Optional but strongly encouraged: attach one real piece of your work. A redacted report, test plan, project plan, proposal, scope of work, article, or a set of posts. Remove anything confidential; we never want a client's material. PDF, Word, text or image, up to 10 MB. If you skip it, tell us why in a sentence.
We use what you send here only to evaluate you for this and future roles. We do not sell or share it.
