As a Software Engineer at M&T Bank, you play a vital role in developing and maintaining innovative financial solutions that enhance the banking experience for our customers. This position is crucial as it directly influences how technology drives business results and customer satisfaction within the bank. You will work on a range of projects that may include developing applications for mobile banking, improving transaction processing systems, or enhancing security protocols to protect sensitive customer information. Your contributions as a Software Engineer will not only impact the technology stack but also influence the strategic direction of the bank. Working closely with cross-functional teams, you will address complex problems that require both technical acumen and a strong understanding of financial services. Expect to engage with cutting-edge technologies and methodologies, as you drive digital transformation initiatives that position M&T Bank as a leader in the industry. In this role, you will find opportunities to innovate, collaborate, and grow within a supportive environment that values continuous improvement and professional development. The dynamic nature of the banking sector means that your work will be both challenging and rewarding, with the potential to make a significant difference in the lives of our customers.
Initial Screening
reportedThe first stage where candidates are evaluated for their basic qualifications and fit.
What to demonstrate
- The first stage where candidates are evaluated for their basic qualifications and fit
- Depth in Behavioral Interviewing
How to prepare
- Be able to walk your CV end to end in two minutes, and say why this company specifically.
- Have your salary expectations, notice period and location constraints ready, and ask for the rest of the loop in writing.
Technical Assessment
reportedCandidates undergo technical evaluations to assess their skills and problem-solving abilities.
What to demonstrate
- Candidates undergo technical evaluations to assess their skills and problem-solving abilities
- Depth in Behavioral Interviewing
How to prepare
- Answer aloud and timed: How do you manage memory in your applications?
- Answer aloud and timed: Describe how you would approach debugging a complex issue in a production environment.
Behavioral Interview
reportedInterviews focusing on cultural fit and past experiences to gauge alignment with the company's values.
What to demonstrate
- Interviews focusing on cultural fit and past experiences to gauge alignment with the company's values
- Depth in Behavioral Interviewing
How to prepare
- Prepare three examples from your own work, each with a decision you made and an outcome you can quantify.
- Re-read the description of the behavioral interview above and write down what you would ask to confirm before it.
Final Interviews
reportedCandidates participate in final interviews, which may include one-on-one and panel formats.
What to demonstrate
- Candidates participate in final interviews, which may include one-on-one and panel formats
- Depth in Behavioral Interviewing
How to prepare
- Answer aloud and timed: How do you prioritize tasks when working on multiple projects?
- Answer aloud and timed: Describe a situation where you had to collaborate with a difficult team member. What was the outcome?
PracHub editorial advice for the preparation topics above.
Prepare for Behavioral Questions
Structured responses using the STAR method (Situation, Task, Action, Result) can help you articulate your experiences effectively.
Understand the Bank's Values
Familiarize yourself with M&T Bank's mission and values to align your answers with their expectations.
Practice Coding Challenges
Utilize platforms like LeetCode or HackerRank to refine your coding skills and become comfortable with algorithmic questions.
Ask Insightful Questions
Prepare thoughtful questions for your interviewers that reflect your interest in the role and the company.
Choose a category, try a prompt, then open its approach, worked solution or follow-up when you need it.
How do you manage memory in your applications?
How do you manage memory in your applications?
Approach
- Say what the runtime actually does before reasoning about the code.
- Name what is shared across threads and what owns each piece of state.
- Identify the window where an invariant is briefly untrue.
- Distinguish a value from a reference to it, and say which one you handed out.
Follow-up
- What happens if two callers reach this at the same time?
- Where could this allocate more than you expect?
Diff a projection against the primary without per-row point reads
The listing projection has drifted and some rows show a stale version. The primary holds 40,000,000 resource rows across 12,000 tenants while serving 1,200 writes and 14,000 reads per second. The obvious repair, reading each resource row and comparing its version against the projection, is correct and would eventually finish. Explain precisely why it is unacceptable here, then give a diff that finds the differing rows, state its complexity, and make it safe to run against a live primary. Replication lag is usually under 100 ms and is not bounded.
Approach
- Quantify the naive cost rather than calling it slow: 40,000,000 point reads at even 0.5 ms each is over five hours serialised, and the only lever is concurrency, which is exactly what you cannot spend. The primary's pool is sized for the write path, and 40,000,000 random reads evict the buffer cache that sustains the 85 percent cache hit rate, so the audit degrades the system it is auditing.
- Replace random access with one ordered pass per side. Both sides can be read in (tenant_id, resource_id) order, which is a sequential scan on each and a merge join in O(n) time and O(1) memory. For a dense diff that is the whole answer, and it reads the primary once instead of 40,000,000 times.
- For the expected sparse case, compare range hashes instead of rows: partition the key space, compute per range an order-independent aggregate over hash(resource_id, version), compare aggregates, and descend only into ranges that differ. With d differing rows and branching factor B, at most d ranges mismatch per level, so the drill-down examines O(d log_B(n/d)) ranges and reads full rows only in mismatching leaves.
- Aggregate with a sum modulo 2^64 or a multiset hash, never XOR. XOR is order-independent but self-cancelling, so two rows wrong in the same way, or a row duplicated on one side, leave the range aggregate matching and the range is declared clean.
Follow-up
- The diff reports 900 stale rows. How do you decide between patching those rows and rebuilding the projection from resource_revision?
- Same job, but the projection lives in a search index that cannot be scanned in key order. What changes?
Canonicalise a request body into a stable idempotency fingerprint
idempotency_key.request_fingerprint is a SHA-256 over the method, path and canonicalised body, and a retry whose fingerprint differs must be rejected with 422 rather than served the stored response. Write the canonicaliser. Bodies are JSON up to 256 KB nested at most 32 levels; clients vary key order, whitespace and unicode escaping, and some send 64-bit ids as JSON numbers. Produce a deterministic byte string such that semantically identical bodies match and any semantic difference does not. State your complexity and name two normalisations you refuse to perform.
Approach
- Parse once into a tree, then re-serialise under fixed rules: object keys sorted, array order preserved, one escaping convention, no insignificant whitespace. Parsing is O(n) and sorting keys is O(k log k) per object, so O(n log n) overall with O(depth) stack, and the 32-level cap is enforced during parsing because hostile nesting is how a canonicaliser becomes a stack overflow.
- Sort keys by their UTF-8 bytes and say why the obvious implementation is wrong in some runtimes: a default string comparison that orders by UTF-16 code units places surrogate pairs, meaning code points from U+10000 up, below U+E000 to U+FFFF, which is not UTF-8 byte order, so two services written in different languages disagree on the same document.
- Do not re-encode numbers through a double. IEEE-754 binary64 represents integers exactly only up to 2^53, so normalising a 19-digit id through a float changes it, and 1 against 1.0 cannot be reconciled without deciding whether they are the same value. Preserve the literal token, and require ids as strings at the API boundary if you want them comparable.
- Reject duplicate keys rather than picking one. JSON permits them and parsers disagree, most keeping the last, so any choice you make ties the fingerprint to a parser detail that the code handling the request does not necessarily share.
Follow-up
- A client sends the same logical request with an extra field your API ignores. Same key, different fingerprint, so you return 422. Is that the right answer?
- Where does the fingerprint get computed relative to request decompression and the body-size limit?
Explain why the owner filter ignores the listing index
The only index on resource is (tenant_id, status, updated_at DESC, resource_id DESC). A new endpoint returns one user's resources across all statuses, newest created first: WHERE tenant_id = $1 AND owner_user_id = $2 ORDER BY created_at DESC LIMIT 20. On a tenant with 2M rows it takes 900 ms and EXPLAIN shows a sort above a large scan. Explain precisely why the existing index cannot serve it, give the index that can, and state which of these the new index still will not help: owner_user_id alone across tenants; the same query ordered by updated_at. PostgreSQL 16.
Approach
- Separate the two jobs an index does. For filtering, a composite btree is seekable only on a left prefix, so with no predicate on status the scan can at best range over tenant_id and test owner_user_id per row; PostgreSQL 16 has no btree skip scan to jump the unconstrained column.
- For ordering, the index is sorted by (status, updated_at) within a tenant and not by created_at, so the LIMIT cannot stop early: every matching row is read and then sorted. That is the 'Sort Method: top-N heapsort' line, and it is why the plan reads 2M rows to answer with 20.
- Derive the replacement from the access path — equality, equality, then the ordering column: CREATE INDEX CONCURRENTLY ON resource (tenant_id, owner_user_id, created_at DESC). The scan seeks to the (tenant, owner) range and walks 20 entries in order, so the Sort node disappears along with the row-read.
- Treat INCLUDE (title, status) as conditional, not free. An index-only scan still visits the heap for any row whose page is not marked all-visible, so on a table taking 1.2k writes/second the win depends on autovacuum keeping the visibility map current, and the wider index costs more on every insert.
Follow-up
- 90% of rows are status='active'. Would a partial index WHERE status = 'active' change your answer, and for which of the three queries?
- A dashboard runs this for 40 owners in one page load. What changes about the design?
Find version gaps and relay lag with window functions
outbox_event holds event_id, aggregate_type, aggregate_id, aggregate_version, event_type, payload, status ('pending','published','dead'), attempts, created_at, published_at. A projection is missing rows and you must decide whether the relay skipped events or the consumer dropped them. Write three queries over the last seven days: one listing every aggregate_id whose published aggregate_version sequence has a hole, one giving per-day counts with a running total, and one returning the newest published event per aggregate. For each, say where the window function is evaluated relative to WHERE and LIMIT. PostgreSQL 16.
Approach
- Gaps: compute lead(aggregate_version) OVER (PARTITION BY aggregate_id ORDER BY aggregate_version) in a subquery, then filter next_version <> aggregate_version + 1 in the outer query. Window functions are evaluated after WHERE, GROUP BY and HAVING and before the outer ORDER BY and LIMIT, so the predicate cannot sit in the same WHERE clause and PostgreSQL 16 has no QUALIFY.
- Say what the seven-day filter does to the answer: it truncates every partition, so the first row per aggregate has no predecessor inside the window and a hole spanning the boundary is invisible. Widen the window, or join to resource.version as the authority for the true maximum.
- Running total: SELECT date_trunc('day', created_at) AS d, count() AS n, sum(count()) OVER (ORDER BY date_trunc('day', created_at) ROWS UNBOUNDED PRECEDING). An aggregate inside a window call is legal because grouping runs before windowing. The grouping key is unique per row here so ROWS and RANGE agree, but write the frame anyway — over ungrouped rows with tied timestamps the default RANGE frame pulls in every peer row and the total jumps.
- Newest per aggregate: DISTINCT ON (aggregate_id) ... ORDER BY aggregate_id, aggregate_version DESC is the cheap PostgreSQL-only form when an index matches that order; row_number() OVER (PARTITION BY aggregate_id ORDER BY aggregate_version DESC) = 1 is the portable form and needs a subquery for the same evaluation-order reason as the gap query.
Follow-up
- Relay failover redelivers events. Does a duplicate break the gap query, and how would you detect one from this table alone?
- Turn the gap check into a continuous monitor rather than a query someone runs after an incident. What does it watch?
What are the key differences between object-oriented programming and functional programming?
What are the key differences between object-oriented programming and functional programming?
Approach
- Clarify what is being asked and what a complete answer contains.
- State your assumptions explicitly before working the problem.
- Say what you would check first and why it is the highest-information step.
- Work from the requirement backwards to the design.
Follow-up
- What assumption would you test first?
- How would you know your answer was wrong?
Explain the concept of polymorphism in programming.
Explain the concept of polymorphism in programming.
Approach
- Clarify what is being asked and what a complete answer contains.
- State your assumptions explicitly before working the problem.
- Say what you would check first and why it is the highest-information step.
- Work from the requirement backwards to the design.
Follow-up
- What assumption would you test first?
- How would you know your answer was wrong?
What are the advantages and disadvantages of using microservices architecture?
What are the advantages and disadvantages of using microservices architecture?
Approach
- Fix the scope first: who calls this, how often, and what they do when it fails.
- Name the read and write paths separately; they rarely have the same bottleneck.
- Choose a partition key and say what query it makes expensive.
- State the consistency you need, and where you are willing to be stale.
Follow-up
- What breaks first when traffic grows ten times?
- How does this behave when that dependency is down for an hour?
How would you design a system to handle a high volume of transactions during peak banking hours?
How would you design a system to handle a high volume of transactions during peak banking hours?
Approach
- Fix the scope first: who calls this, how often, and what they do when it fails.
- Name the read and write paths separately; they rarely have the same bottleneck.
- Choose a partition key and say what query it makes expensive.
- State the consistency you need, and where you are willing to be stale.
Follow-up
- What breaks first when traffic grows ten times?
- How does this behave when that dependency is down for an hour?
Given a dataset, how would you identify trends and make predictions?
Given a dataset, how would you identify trends and make predictions?
Approach
- Clarify what is being asked and what a complete answer contains.
- State your assumptions explicitly before working the problem.
- Say what you would check first and why it is the highest-information step.
- Work from the requirement backwards to the design.
Follow-up
- What assumption would you test first?
- How would you know your answer was wrong?
Describe how you would approach debugging a complex issue in a production environment.
Describe how you would approach debugging a complex issue in a production environment.
Approach
- Establish what changed and when, before forming any theory.
- Pick a bisection that eliminates candidates whichever way it turns out.
- Check the instrumentation before believing the symptom.
- Separate the trigger from the cause; the deploy is rarely the bug.
Follow-up
- What would you look at first, and what would it rule out?
- How would you tell a cause from a coincidence here?
Built from the rounds and topics M&T Bank candidates report.
Prepare, practise & reflect
One practical outcome each day. Spend longer where you need it.
0 / 7 done01Map the M&T Bank loop
- Write out the reported sequence: Initial Screening, Technical Assessment, Behavioral Interview, Final Interviews.
- For each round, write one sentence on what it is judging, from the description above, and mark the one you are least ready for.
Deliverable: A one-page map of the 4 reported rounds, with the weakest marked.
02Work Behavioral Interviewing
- Spend the session on Behavioral Interviewing, which M&T Bank candidates report being tested on.
- Write one worked example in Behavioral Interviewing and time yourself on it.
Deliverable: One timed worked example in Behavioral Interviewing.
03Work Coding Challenges / Assessments
- Spend the session on Coding Challenges / Assessments, which M&T Bank candidates report being tested on.
- Write one worked example in Coding Challenges / Assessments and time yourself on it.
Deliverable: One timed worked example in Coding Challenges / Assessments.
04Work SQL
- Spend the session on SQL, which M&T Bank candidates report being tested on.
- Write one worked example in SQL and time yourself on it.
Deliverable: One timed worked example in SQL.
05Answer out loud: Technical / Domain Questions
- Answer aloud, timed: What are the key differences between object-oriented programming and functional programming?
- Answer aloud, timed: Explain the concept of polymorphism in programming.
Deliverable: Spoken answers to 2 reported Technical / Domain Questions question(s), under time.
06Answer out loud: Behavioral / Leadership Questions
- Answer aloud, timed: Tell me about a time when you faced a significant challenge in a project. How did you overcome it?
- Answer aloud, timed: How do you prioritize tasks when working on multiple projects?
Deliverable: Spoken answers to 2 reported Behavioral / Leadership Questions question(s), under time.
07Answer out loud: Problem-Solving / Case Studies
- Answer aloud, timed: How would you design a system to handle a high volume of transactions during peak banking hours?
- Answer aloud, timed: Given a dataset, how would you identify trends and make predictions?
Deliverable: Spoken answers to 2 reported Problem-Solving / Case Studies question(s), under time.
Expand any day for tasks and deliverables. Your progress is saved on this device.
Behavioural rounds judge the decision you made and what it cost.
Tell me about a time when you faced a significant challenge in a project. How did you overcome it?
Tell me about a time when you faced a significant challenge in a project. How did you overcome it?
Approach
- Pick a story where you made the decision, not one where you watched it.
- State the situation in two sentences and spend the rest on the reasoning.
- Give the blast radius: what could have broken, and what you measured.
- Name the disagreement and how you resolved it with evidence.
Follow-up
- What would you do differently if you ran that again?
- How did you know your change caused the improvement?
How do you prioritize tasks when working on multiple projects?
How do you prioritize tasks when working on multiple projects?
Approach
- Pick a story where you made the decision, not one where you watched it.
- State the situation in two sentences and spend the rest on the reasoning.
- Give the blast radius: what could have broken, and what you measured.
- Name the disagreement and how you resolved it with evidence.
Follow-up
- What would you do differently if you ran that again?
- How did you know your change caused the improvement?
Describe a situation where you had to collaborate with a difficult team member. What was the outcome?
Describe a situation where you had to collaborate with a difficult team member. What was the outcome?
Approach
- Pick a story where you made the decision, not one where you watched it.
- State the situation in two sentences and spend the rest on the reasoning.
- Give the blast radius: what could have broken, and what you measured.
- Name the disagreement and how you resolved it with evidence.
Follow-up
- What would you do differently if you ran that again?
- How did you know your change caused the improvement?
What motivates you to perform at your best?
What motivates you to perform at your best?
Approach
- Pick a story where you made the decision, not one where you watched it.
- State the situation in two sentences and spend the rest on the reasoning.
- Give the blast radius: what could have broken, and what you measured.
- Name the disagreement and how you resolved it with evidence.
Follow-up
- What would you do differently if you ran that again?
- How did you know your change caused the improvement?
How do you handle feedback and criticism from peers or supervisors?
How do you handle feedback and criticism from peers or supervisors?
Approach
- Pick a story where you made the decision, not one where you watched it.
- State the situation in two sentences and spend the rest on the reasoning.
- Give the blast radius: what could have broken, and what you measured.
- Name the disagreement and how you resolved it with evidence.
Follow-up
- What would you do differently if you ran that again?
- How did you know your change caused the improvement?
Discuss a time when you had to analyze a large amount of data to make a decision. What was your process?
Discuss a time when you had to analyze a large amount of data to make a decision. What was your process?
Approach
- Pick a story where you made the decision, not one where you watched it.
- State the situation in two sentences and spend the rest on the reasoning.
- Give the blast radius: what could have broken, and what you measured.
- Name the disagreement and how you resolved it with evidence.
Follow-up
- What would you do differently if you ran that again?
- How did you know your change caused the improvement?
- 01
Tell me about a time when you faced a significant challenge in a project. How did you overcome it?
- 02
How do you prioritize tasks when working on multiple projects?
- 03
Describe a situation where you had to collaborate with a difficult team member. What was the outcome?
- 04
What motivates you to perform at your best?
How difficult are the interviews?
The interviews at M&T Bank are considered to be thorough and can range from average to difficult, depending on the specific role and team. You should expect a mix of technical and behavioral questions.
M&T Bank Software Engineer candidate reports ↗What differentiates successful candidates?
Successful candidates demonstrate a strong understanding of the technical requirements, possess excellent problem-solving skills, and align well with the bank's values and culture.
M&T Bank Software Engineer candidate reports ↗How long does the interview process typically take?
The timeline can vary, but candidates generally report a duration of several weeks from the initial screening to the final decision.
M&T Bank Software Engineer candidate reports ↗What is the company culture like at M&T Bank?
M&T Bank promotes a collaborative and inclusive work environment where employees are encouraged to innovate and contribute to the team's success.
M&T Bank Software Engineer candidate reports ↗Are there opportunities for remote work?
The availability of remote work options can vary by team and role, so it's best to clarify during your interviews.
M&T Bank Software Engineer candidate reports ↗What topics does M&T Bank test in interviews?
M&T Bank interviews most often cover SQL, SAS, Regulatory Compliance, Behavioral Interviewing, and Regression Analysis. The exact emphasis depends on the specific role you apply for.
M&T Bank Software Engineer candidate reports ↗Sources & methodology 3 sources ↗
No official company page is cited. Rounds and questions come from candidate reports and PracHub editorial material; each source shows the date it was read.
- 01M&T Bank Software Engineer candidate reports ↗
Company-reported rounds, questions and FAQ.
Candidate reports · Accessed 2026-09-22 - 02PracHub Software Engineer practice ↗
PracHub practice material, not company-reported.
PracHub page · Accessed 2026-09-22 - 03PracHub preparation framework ↗
PracHub preparation guidance.
PracHub page · Accessed 2026-09-22
Explore related engineering environments and compare the preparation focus.
Cognition Software Engineer Interview Guide
What Cognition asks Software Engineer candidates, from reported rounds and questions.
Vercel Software Engineer Interview Guide
Debugging practice for Vercel software engineer prep built on a reproduction you trust, narrowing to the smallest failing input, and changing one variable per run so the result stays attributable.
Together Ai Software Engineer Interview Guide
Failure-handling practice for Together Ai software engineer candidates: requests whose outcome a timeout leaves unknown, where a retry is safe, and deduplicating at the receiver instead of assuming exactly-once delivery.
Spotify Software Engineer Interview Guide
Timed practice for Spotify software engineer candidates who lose time to the clock: short problems taken end to end, then reviewed against a written rubric rather than a passing test run.