As a Software Engineer at Wyetech, you will play a pivotal role in driving innovative technological solutions that address critical challenges for federal government customers. Your contributions will directly impact the robustness of cybersecurity initiatives, ensuring that the systems and applications you develop and maintain are secure, efficient, and effective in identifying and mitigating risks. You will work in a collaborative environment with a team of talented professionals committed to advancing the boundaries of technology and ensuring the safety of vital networks. This role is essential not only for the technical expertise you bring but also for your ability to engage with mission stakeholders to gather requirements and translate them into effective software solutions. Your work will involve the creation of parsers for network protocols and the development of algorithms that automate data analysis, ultimately enhancing the operational capabilities of our clients. The complexity and scale of projects at Wyetech provide a unique opportunity to engage with cutting-edge technology in a high-impact environment, making this position both challenging and rewarding.
Initial Screening
reportedThe first stage where your application is reviewed to assess basic qualifications.
What to demonstrate
- The first stage where your application is reviewed to assess basic qualifications
- Depth in Python
How to prepare
- Be able to walk your CV end to end in two minutes, and say why this company specifically.
- Have your salary expectations, notice period and location constraints ready, and ask for the rest of the loop in writing.
Technical Assessment
reportedA rigorous evaluation of your technical capabilities through practical problem-solving.
What to demonstrate
- A rigorous evaluation of your technical capabilities through practical problem-solving
- Depth in Python
How to prepare
- Answer aloud and timed: Describe a challenging programming problem you faced and how you resolved it.
- Answer aloud and timed: How do you ensure the security and efficiency of your code in a cybersecurity context?
Behavioral Interview
reportedAn interview focusing on your fit within the company culture and values.
What to demonstrate
- An interview focusing on your fit within the company culture and values
- Depth in Python
How to prepare
- Prepare three examples from your own work, each with a decision you made and an outcome you can quantify.
- Re-read the description of the behavioral interview above and write down what you would ask to confirm before it.
Team Interaction
reportedOpportunities to interact with potential colleagues and managers.
What to demonstrate
- Opportunities to interact with potential colleagues and managers
- Depth in Python
How to prepare
- Answer aloud and timed: How would you approach automating the analysis of large datasets from network traffic?
- Answer aloud and timed: Given a specific network anomaly, how would you investigate and respond to it?
PracHub editorial advice for the preparation topics above.
Going into the loop without having done this.
Understand the mission: Familiarize yourself with Wyetech's core mission and values. This understanding will help you articulate how your skills align with the company's goals.
Going into the loop without having done this.
Practice coding: Engage in regular coding practice, particularly in Python and C++, to ensure you are comfortable with technical interviews.
Going into the loop without having done this.
Prepare examples: Have concrete examples ready that showcase your problem-solving skills and collaborative experiences.
Going into the loop without having done this.
Ask questions: Be prepared to ask insightful questions about the team dynamics and projects during your interviews.
Choose a category, try a prompt, then open its approach, worked solution or follow-up when you need it.
Collapse a redelivered event batch into per-aggregate high-water marks
You drain a batch of up to 5,000,000 events, each (aggregate_id BIGINT, aggregate_version INT, event_type, payload). The log guarantees order within one aggregate only; the batch merges 64 partitions, and a relay failover has redelivered a range, so an older version for an aggregate can appear after a newer one. Given a map of last_applied_version per aggregate, produce the events worth applying, at most one per (aggregate_id, version), plus the count discarded. Target O(n) time. State the memory for 2,000,000 distinct aggregates and what you do when it does not fit.
Approach
- One pass, one hash map from aggregate_id to the highest version kept, and a discard counter. An event whose version is at or below last_applied_version for its aggregate is dropped without further work, which is the whole reason the event carries its version rather than a delta. O(n) expected time, O(d) space in distinct aggregates.
- Keep the maximum, never the last occurrence. The redelivered range means the final appearance of an aggregate in the batch can be an older version than one seen earlier in the same batch, so last-wins applies stale state over newer state and the projection regresses with no error anywhere.
- Cost the memory instead of calling it large: an 8-byte key plus a 4-byte version is 12 bytes of payload, and an open-addressed table held at a 0.7 load factor costs roughly 17 bytes per entry before per-slot metadata, so 2,000,000 aggregates is tens of megabytes in a native layout and several times that in a runtime that boxes both key and value.
- If the distinct set exceeds memory, partition on hash(aggregate_id) mod P and reduce each partition independently. Every event for one aggregate hashes to the same partition, so the per-partition result is exact and the merge is concatenation rather than a second reduction.
Follow-up
- The payload is a patch rather than a snapshot, so applying only the highest version loses the intermediate changes. What changes in your reduction?
- How do you detect that version 7 arrived while version 6 was never delivered, and what should the consumer do about the gap?
Identify the heaviest tenants in a five-minute window under memory pressure
The edge service handles about 3,000 requests per second across roughly 50,000 tenants, peaking near 9,000. Expose the 50 heaviest tenants by request count over the trailing five minutes so limits can be tightened before one tenant's backfill starves the fleet. You may not retain five minutes of raw records. Give the exact solution and its memory, then the bounded-memory approximation with its error stated as a formula, and say which you would ship and at what tenant cardinality that choice changes.
Approach
- Do the exact version first, because it is affordable at this cardinality: a ring of 300 one-second counters per tenant, advanced lazily, is 1,200 bytes of counters per tenant and roughly 60 to 90 MB for 50,000 tenants with overhead. Carry a running total and subtract the bucket you overwrite so a window read is O(1) rather than 300 adds.
- Extract the top 50 with a size-k min-heap over the tenant sums: O(d log k) for d tenants, against O(d log d) to sort them all. Maintaining the heap continuously instead of on query requires a tenant-to-heap-index map, because incrementing a count already inside the heap means sifting from a known position, and without that map you rebuild the heap on every request.
- State the approximation precisely rather than gesturing at sketches. Misra-Gries with m counters retains every item whose true count exceeds N/(m+1), and each retained count underestimates the truth by at most N/(m+1). With m = 1,000 and N = 900,000 requests in the window the error is roughly 900 requests, which is fine for spotting a tenant sending 50,000 and useless for ranking two tenants 200 apart.
- Say what breaks when the window slides: Misra-Gries and Space-Saving are insert-only and cannot be decremented as records age out. The workable construction is one summary per sub-window, say ten seconds, with 30 summaries merged at query time, and the merged error is the sum of the per-summary errors, so the bound degrades linearly in the number of sub-windows.
Follow-up
- The heaviest tenant is heavy because of one export job rather than user traffic. Should the limiter treat those as the same tenant?
- Two tenants sit tied at the boundary of the top 50. Does your answer flap, and does the flapping matter?
Archive a resource graph without breaking live references or recursing
Resources reference other resources within a tenant; for the largest tenant the reference table holds up to 2,000,000 nodes and 8,000,000 edges. Archiving a resource must archive everything reachable from it that nothing outside the set still references, refuse when a live external referrer exists, and terminate when references form cycles, which they legitimately do. Produce the archive order and the refusal list, targeting O(V+E). Say what stops the traversal crossing a tenant boundary, and why recursion is the wrong control structure at this size.
Approach
- Load the subgraph with the tenant predicate on both endpoints of the edge, not only on the side you started from. Scoping the left table alone is the classic cross-tenant leak: one mis-entered edge then pulls another tenant's resources into the traversal and, worse, into the archive.
- Traverse iteratively with an explicit stack. A 2,000,000-node graph can hold a chain deep enough to exhaust a native stack in the low tens of thousands of frames, and that failure is a process crash rather than an error you can return.
- Treat cycles as data rather than corruption: compute strongly connected components with Tarjan in O(V+E) using its own explicit stack, then condense. The condensation is a DAG, so a topological order over it gives the archive order, and every member of a component archives in one transaction because no order within a cycle is valid.
- Decide refusals with reverse edges. A candidate is archivable only if every in-edge originates inside the candidate set, so build the transpose or count in-degrees restricted to the visited set, and emit each blocked resource with the id of the external referrer, which is the only part of the answer an operator can act on.
Follow-up
- The graph is read in one query and the archive writes a minute later. What can change in between, and how do you make the write safe?
- The candidate set is 400,000 resources. Is that one transaction, and if not, what does a half-finished archive look like to a reader?
Hold a per-tenant active cap against concurrent creates
A tenant on the standard plan may hold at most 50 resources with status='active'. The create handler runs SELECT count(*) FROM resource WHERE tenant_id = $1 AND status = 'active', compares to 50, then inserts. Two creates arrive 3 ms apart on different instances and the tenant lands at 51. Name the anomaly, say whether PostgreSQL 16 READ COMMITTED or REPEATABLE READ prevents it and why, then give an implementation that holds the cap at READ COMMITTED with the exact statements. Finally, say what changes when the cap is 'at most one running export per tenant' on job_run.
Approach
- Name it: write skew. The two transactions read an overlapping set and write disjoint rows, so there is no row-level conflict for the engine to detect and each commit is individually legal.
- Rule out the levels precisely. READ COMMITTED takes a fresh snapshot per statement and takes no lock on the counted rows, so both see 49. PostgreSQL's REPEATABLE READ is snapshot isolation: it removes non-repeatable reads and phantoms within the snapshot but still admits write skew, because the anomaly is not a re-read of a changed row, it is a read of a set that a concurrent transaction invalidates. Only SERIALIZABLE closes it, by tracking the read dependency and aborting one transaction with SQLSTATE 40001 — a guarantee that exists only if the application re-runs the whole transaction from the read.
- Convert the set predicate into a single-row conflict: keep tenant.active_resource_count and run UPDATE tenant SET active_resource_count = active_resource_count + 1 WHERE tenant_id = $1 AND active_resource_count < 50 in the same transaction as the INSERT. Zero affected rows is the cap, returned as 409. The row lock serialises the decision at any isolation level, and contention is bounded to one tenant's row — which is also the fair-scheduling unit, unlike a global counter that would convoy every tenant behind one row.
- State the cost you just took on: a counter is a second source of truth that can drift, so every path that changes status must adjust it inside the same transaction, and a periodic reconciliation has to exist, with resource_revision as the authority for what the count should have been.
Follow-up
- A resource moves from archived back to active. Which statements change, and what breaks if the counter update and the status change land in different transactions?
- The cap becomes plan-dependent and a plan can change mid-month. Where does the number 50 live, and who reads it?
Explain why the owner filter ignores the listing index
The only index on resource is (tenant_id, status, updated_at DESC, resource_id DESC). A new endpoint returns one user's resources across all statuses, newest created first: WHERE tenant_id = $1 AND owner_user_id = $2 ORDER BY created_at DESC LIMIT 20. On a tenant with 2M rows it takes 900 ms and EXPLAIN shows a sort above a large scan. Explain precisely why the existing index cannot serve it, give the index that can, and state which of these the new index still will not help: owner_user_id alone across tenants; the same query ordered by updated_at. PostgreSQL 16.
Approach
- Separate the two jobs an index does. For filtering, a composite btree is seekable only on a left prefix, so with no predicate on status the scan can at best range over tenant_id and test owner_user_id per row; PostgreSQL 16 has no btree skip scan to jump the unconstrained column.
- For ordering, the index is sorted by (status, updated_at) within a tenant and not by created_at, so the LIMIT cannot stop early: every matching row is read and then sorted. That is the 'Sort Method: top-N heapsort' line, and it is why the plan reads 2M rows to answer with 20.
- Derive the replacement from the access path — equality, equality, then the ordering column: CREATE INDEX CONCURRENTLY ON resource (tenant_id, owner_user_id, created_at DESC). The scan seeks to the (tenant, owner) range and walks 20 entries in order, so the Sort node disappears along with the row-read.
- Treat INCLUDE (title, status) as conditional, not free. An index-only scan still visits the heap for any row whose page is not marked all-visible, so on a table taking 1.2k writes/second the win depends on autovacuum keeping the visibility map current, and the wider index costs more on every insert.
Follow-up
- 90% of rows are status='active'. Would a partial index WHERE status = 'active' change your answer, and for which of the three queries?
- A dashboard runs this for 40 owners in one page load. What changes about the design?
Can you explain how you would approach developing a parser for a specific network protocol?
Can you explain how you would approach developing a parser for a specific network protocol?
Approach
- Clarify what is being asked and what a complete answer contains.
- State your assumptions explicitly before working the problem.
- Say what you would check first and why it is the highest-information step.
- Work from the requirement backwards to the design.
Follow-up
- What assumption would you test first?
- How would you know your answer was wrong?
Describe a challenging programming problem you faced and how you resolved it.
Describe a challenging programming problem you faced and how you resolved it.
Approach
- Clarify what is being asked and what a complete answer contains.
- State your assumptions explicitly before working the problem.
- Say what you would check first and why it is the highest-information step.
- Work from the requirement backwards to the design.
Follow-up
- What assumption would you test first?
- How would you know your answer was wrong?
How do you ensure the security and efficiency of your code in a cybersecurity context?
How do you ensure the security and efficiency of your code in a cybersecurity context?
Approach
- Clarify what is being asked and what a complete answer contains.
- State your assumptions explicitly before working the problem.
- Say what you would check first and why it is the highest-information step.
- Work from the requirement backwards to the design.
Follow-up
- What assumption would you test first?
- How would you know your answer was wrong?
What strategies do you use to optimize data parsing and processing?
What strategies do you use to optimize data parsing and processing?
Approach
- Clarify what is being asked and what a complete answer contains.
- State your assumptions explicitly before working the problem.
- Say what you would check first and why it is the highest-information step.
- Work from the requirement backwards to the design.
Follow-up
- What assumption would you test first?
- How would you know your answer was wrong?
How would you approach automating the analysis of large datasets from network traffic?
How would you approach automating the analysis of large datasets from network traffic?
Approach
- Clarify what is being asked and what a complete answer contains.
- State your assumptions explicitly before working the problem.
- Say what you would check first and why it is the highest-information step.
- Work from the requirement backwards to the design.
Follow-up
- What assumption would you test first?
- How would you know your answer was wrong?
Given a specific network anomaly, how would you investigate and respond to it?
Given a specific network anomaly, how would you investigate and respond to it?
Approach
- Clarify what is being asked and what a complete answer contains.
- State your assumptions explicitly before working the problem.
- Say what you would check first and why it is the highest-information step.
- Work from the requirement backwards to the design.
Follow-up
- What assumption would you test first?
- How would you know your answer was wrong?
How would you design a system for real-time network traffic analysis?
How would you design a system for real-time network traffic analysis?
Approach
- Fix the scope first: who calls this, how often, and what they do when it fails.
- Name the read and write paths separately; they rarely have the same bottleneck.
- Choose a partition key and say what query it makes expensive.
- State the consistency you need, and where you are willing to be stale.
Follow-up
- What breaks first when traffic grows ten times?
- How does this behave when that dependency is down for an hour?
Can you explain the importance of scalability and performance in system architecture?
Can you explain the importance of scalability and performance in system architecture?
Approach
- Fix the scope first: who calls this, how often, and what they do when it fails.
- Name the read and write paths separately; they rarely have the same bottleneck.
- Choose a partition key and say what query it makes expensive.
- State the consistency you need, and where you are willing to be stale.
Follow-up
- What breaks first when traffic grows ten times?
- How does this behave when that dependency is down for an hour?
Read latency spikes on a sixty-second sawtooth
The cached listing read path serves about 14k reads/second at an 85% hit rate. p99 sits at 35 ms for 57 seconds, jumps to 900 ms for 3, and repeats. During each spike the primary shows several hundred identical listing queries starting within the same millisecond, all carrying one large tenant's id. Cache entries use a 60-second TTL. Give the mechanism, the ordered checks, the fix, and the correctness hazard your fix must not introduce.
Approach
- Match the period to a configured number before theorising about load. A spike every 60 seconds against a 60-second TTL is an entry expiring, and you confirm it by correlating spike timestamps with the entry's write time rather than with the traffic curve. If the period had matched a cron or a GC interval instead, this is a different investigation.
- Establish the concurrency of the miss. Several hundred identical queries in one millisecond means the miss path has no coalescing: every request that arrives between expiry and repopulation recomputes. The herd size is that key's arrival rate times its recompute time, so at 1.2k reads/second for the hot key and a 250 ms recompute you expect about 300 concurrent misses, which matches what is observed.
- Add single-flight on the miss path so one caller per key recomputes under a short-lived lock while the rest wait for its result. Prefer stale-while-revalidate where the read tolerates it: return the expired value immediately and refresh asynchronously, which removes the latency spike rather than serialising it into a queue of waiters.
- De-synchronise the keys. Write TTLs with jitter, for example 60 seconds plus or minus 10%, so a deploy or a mass invalidation does not align every key on the same second and turn a per-key herd into a fleet-wide one.
Follow-up
- The same sawtooth appears on a key that is invalidated on write rather than expired. Is that the same bug?
- How does your answer change if the recompute takes 4 seconds instead of 250 ms?
Built from the rounds and topics Wyetech candidates report.
Prepare, practise & reflect
One practical outcome each day. Spend longer where you need it.
0 / 7 done01Map the Wyetech loop
- Write out the reported sequence: Initial Screening, Technical Assessment, Behavioral Interview, Team Interaction.
- For each round, write one sentence on what it is judging, from the description above, and mark the one you are least ready for.
Deliverable: A one-page map of the 4 reported rounds, with the weakest marked.
02Work Python
- Spend the session on Python, which Wyetech candidates report being tested on.
- Write one worked example in Python and time yourself on it.
Deliverable: One timed worked example in Python.
03Work Analytic Governance Frameworks
- Spend the session on Analytic Governance Frameworks, which Wyetech candidates report being tested on.
- Write one worked example in Analytic Governance Frameworks and time yourself on it.
Deliverable: One timed worked example in Analytic Governance Frameworks.
04Work API Integration (OpenAI, AWS Bedrock)
- Spend the session on API Integration (OpenAI, AWS Bedrock), which Wyetech candidates report being tested on.
- Write one worked example in API Integration (OpenAI, AWS Bedrock) and time yourself on it.
Deliverable: One timed worked example in API Integration (OpenAI, AWS Bedrock).
05Answer out loud: Technical / Domain Questions
- Answer aloud, timed: What is your experience with Python and its libraries in the context of network analysis?
- Answer aloud, timed: Can you explain how you would approach developing a parser for a specific network protocol?
Deliverable: Spoken answers to 2 reported Technical / Domain Questions question(s), under time.
06Answer out loud: Problem-Solving / Case Studies
- Answer aloud, timed: Describe a time when you had to debug a complex system. What steps did you take?
- Answer aloud, timed: How would you approach automating the analysis of large datasets from network traffic?
Deliverable: Spoken answers to 2 reported Problem-Solving / Case Studies question(s), under time.
07Answer out loud: Behavioral / Leadership
- Answer aloud, timed: How do you prioritize tasks when working on multiple projects?
- Answer aloud, timed: Describe a situation where you had to collaborate with a difficult team member. How did you handle it?
Deliverable: Spoken answers to 2 reported Behavioral / Leadership question(s), under time.
Expand any day for tasks and deliverables. Your progress is saved on this device.
Behavioural rounds judge the decision you made and what it cost.
What is your experience with Python and its libraries in the context of network analysis?
What is your experience with Python and its libraries in the context of network analysis?
Approach
- Pick a story where you made the decision, not one where you watched it.
- State the situation in two sentences and spend the rest on the reasoning.
- Give the blast radius: what could have broken, and what you measured.
- Name the disagreement and how you resolved it with evidence.
Follow-up
- What would you do differently if you ran that again?
- How did you know your change caused the improvement?
Describe a time when you had to debug a complex system. What steps did you take?
Describe a time when you had to debug a complex system. What steps did you take?
Approach
- Pick a story where you made the decision, not one where you watched it.
- State the situation in two sentences and spend the rest on the reasoning.
- Give the blast radius: what could have broken, and what you measured.
- Name the disagreement and how you resolved it with evidence.
Follow-up
- What would you do differently if you ran that again?
- How did you know your change caused the improvement?
How do you prioritize tasks when working on multiple projects?
How do you prioritize tasks when working on multiple projects?
Approach
- Pick a story where you made the decision, not one where you watched it.
- State the situation in two sentences and spend the rest on the reasoning.
- Give the blast radius: what could have broken, and what you measured.
- Name the disagreement and how you resolved it with evidence.
Follow-up
- What would you do differently if you ran that again?
- How did you know your change caused the improvement?
Describe a situation where you had to collaborate with a difficult team member. How did you handle it?
Describe a situation where you had to collaborate with a difficult team member. How did you handle it?
Approach
- Pick a story where you made the decision, not one where you watched it.
- State the situation in two sentences and spend the rest on the reasoning.
- Give the blast radius: what could have broken, and what you measured.
- Name the disagreement and how you resolved it with evidence.
Follow-up
- What would you do differently if you ran that again?
- How did you know your change caused the improvement?
What motivates you to succeed in a high-pressure environment?
What motivates you to succeed in a high-pressure environment?
Approach
- Pick a story where you made the decision, not one where you watched it.
- State the situation in two sentences and spend the rest on the reasoning.
- Give the blast radius: what could have broken, and what you measured.
- Name the disagreement and how you resolved it with evidence.
Follow-up
- What would you do differently if you ran that again?
- How did you know your change caused the improvement?
- 01
What is your experience with Python and its libraries in the context of network analysis?
- 02
Describe a time when you had to debug a complex system. What steps did you take?
- 03
How do you prioritize tasks when working on multiple projects?
- 04
Describe a situation where you had to collaborate with a difficult team member. How did you handle it?
How difficult is the interview process, and how much preparation time is typical?
The interview process is designed to be challenging but fair, focusing on both technical and behavioral aspects. Candidates typically spend several weeks preparing, reviewing relevant technologies, and practicing problem-solving exercises.
Wyetech Software Engineer candidate reports ↗What differentiates successful candidates?
Successful candidates demonstrate not only technical expertise but also strong collaboration skills and alignment with Wyetech's values. Being able to articulate your past experiences and how they relate to the company's mission is crucial.
Wyetech Software Engineer candidate reports ↗Can you describe the culture and working style at Wyetech?
Wyetech fosters a collaborative and innovative work environment where employees are encouraged to voice their ideas. The culture emphasizes integrity, teamwork, and a commitment to excellence, making it an inspiring place to work.
Wyetech Software Engineer candidate reports ↗What is the typical timeline from the initial screen to an offer?
The timeline can vary, but candidates usually receive feedback within a few weeks of their initial interviews. The entire process from screening to offer may take four to eight weeks, depending on scheduling and internal processes.
Wyetech Software Engineer candidate reports ↗Are there remote work or hybrid expectations?
While many positions are onsite, Wyetech may offer hybrid arrangements depending on the role and team dynamics. It's best to inquire during your interview about specific expectations for your position.
Wyetech Software Engineer candidate reports ↗How hard is the Wyetech interview?
Candidates most commonly rate Wyetech interviews as medium, based on 1 reported interviews.
Wyetech Software Engineer candidate reports ↗What topics does Wyetech test in interviews?
Wyetech interviews most often cover Python, Analytic Governance Frameworks, API Integration (OpenAI, AWS Bedrock), Model Governance / Auditability, and Machine Learning / AI Engineering (general). The exact emphasis depends on the specific role you apply for.
Wyetech Software Engineer candidate reports ↗Where is Wyetech headquartered?
Wyetech is headquartered in Odenton, US.
Wyetech Software Engineer candidate reports ↗Sources & methodology 3 sources ↗
Official role evidence, timestamped platform data and clearly labeled preparation advice.
- 01Wyetech Software Engineer candidate reports ↗
Company-reported rounds, questions and FAQ.
candidate · Accessed 2026-09-22 - 02PracHub Software Engineer practice ↗
PracHub practice material, not company-reported.
platform · Accessed 2026-09-22 - 03PracHub preparation framework ↗
PracHub preparation guidance.
platform · Accessed 2026-09-22
Explore related engineering environments and compare the preparation focus.
Western Alliance Bank Software Engineer Interview Guide
What Western Alliance Bank asks Software Engineer candidates, from reported rounds and questions.
Visionist Software Engineer Interview Guide
What Visionist asks Software Engineer candidates, from reported rounds and questions.
VBeyond Software Engineer Interview Guide
What VBeyond asks Software Engineer candidates, from reported rounds and questions.
Vannevar Software Engineer Interview Guide
What Vannevar asks Software Engineer candidates, from reported rounds and questions.