I applied online. I interviewed at PaperCut Software (Melbourne) in May 2026
Interview
The process consisted of multiple stages including an initial recruiter discussion, a technical/behavioural interview, and a final on-site workshop/presentation with senior security and engineering stakeholders.
The final stage involved presenting a proposed approach to a security scenario and discussing remediation strategies, architecture considerations, customer impact, and operational constraints. The interview was interactive and included a significant amount of challenge and back-and-forth discussion from the panel.
Overall, the team was technically knowledgeable and the discussions were engaging. However, the final workshop felt somewhat unstructured at times, with some questions and expectations differing from the original scenario provided beforehand. The company culture also appeared very casual compared to more enterprise-oriented environments, which is something candidates should be aware of when preparing.
Interview questions [2]
Question 1
They challenged why I classified the issue as a “security incident” rather than a product bug, and why I proposed broader architectural remediation instead of a smaller tactical fix.
Candidates should expect a collaborative but highly discussion-driven workshop rather than a traditional Q&A interview. It helps to balance security best practices with pragmatic product and engineering trade-offs, especially in a SaaS environment.