Fortinet Interview Guide (2026): HackerRank in C and FortiGuard Roles

Fortinet was founded in the San Francisco Bay Area in 2000 by Ken and Michael Xie, and Ken Xie is still founder, chairman and CEO. FortiOS runs across the FortiGate line, and Fortinet says it is the only security vendor that designs and builds its own security processing units.

The 2025 annual report says R&D is centered in the U.S. and Canada, which hold about 30% and 20% of staff. The 2026 new-grad posting for Canada calls Burnaby “our technology hub” and also recruits for Ottawa. Of 1,062 openings on the careers site on November 5, 2026, about 62% were sales or sales engineering, by the site’s own job-function filter; of its 178 research and development openings, Burnaby had the most, followed by Sunnyvale headquarters. The work they describe is mostly C on Linux: FortiSwitch networking, the FortiGate switch controller, and the TLS stack and UTM features.

Process

Fortinet does not publish its process. The few public reports, on Jointaro, Blind, LeetCode Discuss and Reddit, mostly describe a short loop testing C and networking alongside standard coding problems. Support (TAC) candidates describe a different path, covered under Prep priorities.

The first technical step is usually a HackerRank test. A Burnaby embedded candidate (July 2024) describes two hours: 10 multiple-choice math and logic questions plus four easy-to-medium problems in C. A November 2023 Blind post describes a two-hour online coding test in C, and a December 2024 Burnaby report says outside resources are off limits. A 2022 Blind thread from a California staff-level candidate adds a written question on sorting a large file with little RAM.

Interviews vary by team. The July 2024 candidate had two in-person rounds: debugging a C program, then debugging techniques and socket programming. A February 2024 Vancouver candidate had a four-hour block of LeetCode problems in C plus a code review question. The 2022 Blind candidate had three half-hour rounds of “C, OS and network related questions.” A Burnaby engineer with an April 2025 offer describes a LeetCode-medium assessment, rounds on system design, C++ coding, TCP/IP and firewalls, then a managerial round on team fit. A Sunnyvale senior engineer (September 2023) reports no LeetCode or system design, only network security depth, and an offer within a month. A May 2026 Reddit post on an AI Agent Developer role describes three back-to-back sessions of system design and live coding.

Stage	Reported format	What it tests
Recruiter screen	Short call	Background, motivation, level
Online assessment	HackerRank, about two hours, often in C	C fluency, math and logic, speed
Technical interviews	Two to four rounds (30 minutes each in one report), or one long block	Pointers, memory bugs, sockets, TCP/IP, OS, data structures
Manager round	Length not reported	Past projects, team fit

What they actually ask

Reported questions, with source and date:

• “You’re given a stream of network packets. Each packet has a source IP, destination IP, and a timestamp.” Design a system to detect an IP making more than 1,000 requests per minute, framed as rate limiting (Burnaby, April 2025).
• “How to debug a memory leak?” after a round debugging a C program (Burnaby, July 2024).
• A FizzBuzz variant in C: “Fizz” on multiples of two, “Buzz” on multiples of five (Burnaby, December 2024).
• “How do you sort a big file with less RAM” (Blind, California, 2022). The same candidate lists sockets, pointers, TCP, UDP, memory corruption, thread safety, DNS and ARP as topics.
• “Describe TCP” and “Describe a hash table,” then LeetCode mediums including Course Schedule (U.S. SDE, January 2022).
• Network protocols at every layer, then firewall, DDoS and data plane questions (Sunnyvale senior, September 2023).
• “How to consider system security,” in a 90-minute round of SQL and C# questions (Vancouver, November 2025). Not every team writes C.

Security roles at Fortinet

Security hiring splits across four groups whose interviews differ from the C-and-sockets loop. We could not open any detailed interview report for FortiGuard threat research or PSIRT roles, so this section relies on postings: they say what you will be measured against, not how.

On the threat research side, FortiGuard Labs is Fortinet’s threat intelligence and research organization. A separate Cyber Threat Researcher opening in Burnaby (October 28, 2026), on a network threat research team the posting does not tie to FortiGuard, wants packet analysis in Wireshark, Zeek and Suricata, mapping to MITRE ATT&CK and threat hunting in customer NDR data, includes writing technical articles, and invites early-career applicants. The Canada new-grad posting also lists AV and IPS analyst roles, and two AV analyst reports describe assembly-language tests, plus a network security test in 2022 and C and C++ questions in 2018.

FortiGuard also has a customer-facing research role: the Senior Threat Intelligence Research Engineer in Sunnyvale sits on the FortiGuard SE team and supports presales. It builds workshops, demos and capture-the-flag challenges on Active Directory exploitation, malware emulation and AI model manipulation, and the posting asks for comfort presenting to technical and business audiences.

Product security belongs to PSIRT. Fortinet’s vulnerability policy describes fuzzing before each release, manual code audits by dedicated security engineers, and advisories on the second Tuesday of each month. A 2025 entry-level PSIRT posting (Sophia Antipolis, now closed, listed under Lacework on a General Catalyst job board) covered incident triage, testing reported vulnerabilities, and finding new bugs through black-box analysis, fuzzing and source auditing, and asked for asymmetric cryptography and “high proficiency in C language.”

Corporate information security hires separately. The Staff Applications Security Engineer does code reviews, penetration tests and architecture reviews and handles externally reported vulnerabilities. The Staff AI Security Engineer threat-models chatbots, MCP implementations and autonomous agents. The Burnaby Security Researcher red-teams Fortinet’s cloud services, including LLM prompt injection, and warns that “CVE, Pentest reports, Tech articles may be asked as proofs.”

The common thread is evidence: published work, tool fluency, and bugs found in real code. For how these loops weigh judgment against recall, see how security engineer loops are graded.

Levels and comp (2026)

For U.S. software engineers, Levels.fyi (November 2026) shows median total compensation of about $128K at P1, $149K at P2, $194K at P3 and $239K at P4, with an overall median of $203K, roughly $183K base and $20K a year in stock. Its P5 median sits below P4, a sign of thin data. Greater Vancouver runs from about CA$101K at P1 to CA$174K at P4.

Sunnyvale’s early-career embedded developer posting (November 2, 2026) says earnings “are expected to be $110,000 – $180,000,” and the early-career software development engineer gives $134,000 to $220,000; both say earnings, not base, and both require U.S. work authorization without sponsorship. Burnaby postings state base salary: CA$94,000 to CA$115,000 for an embedded developer with three-plus years of C/C++, CA$120,000 to CA$140,000 for the senior TLS-stack role, and CA$86,000 to CA$106,000 for new-grad TAC support. The two staff security postings show a U.S. base of $170,000 to $240,000. The Senior Threat Intelligence Research Engineer’s $245,000 to $312,000 is on-target earnings for a commission-eligible sales engineering role, not base. In Burnaby, the Cyber Threat Researcher posting gives CA$98,500 to CA$143,700 base and the Security Researcher CA$119,000 to CA$136,000.

Even before converting currencies, the Burnaby base band for three-plus years of C/C++ sits mostly below the Sunnyvale earnings bands for zero to three years, though one is base and the other is earnings. U.S. postings say all roles are eligible for the equity program and bonus eligibility is reviewed at hire and annually. The 2022 Blind candidate was offered a plain Software Engineer title instead of the staff role they interviewed for, which they put down to having under three years of experience.

Prep priorities

Write C by hand. Practice LeetCode easy and medium problems in plain C with no container library: linked lists, string handling, hash tables you build yourself. Then cover the topics the reports keep naming: pointers, memory corruption, finding leaks, thread safety. Do timed math and logic drills for the multiple-choice half of the test.

Know sockets at the level of code: write a TCP server with socket, bind, listen and accept, and explain what happens when a packet is lost. For the TLS-stack team, start with the TLS handshake interview guide.

For TAC roles, the bar is networking fundamentals and FortiGate fluency. A September 2026 Reddit report for a support role lists an HR screen, a HackerRank test, a team technical interview, an NSE4 certification the candidate calls “apparently a prerequisite now,” and a new closed-book onsite test of about 20 technical and 20 math and logic questions. In a 2025 r/fortinet thread, commenters suggested IPsec versus SSL VPN, SSL decryption, BGP, ADVPN, SD-WAN and ZTNA, and one noted how many senior candidates cannot explain a subnet versus a VLAN.

For security roles, gather your evidence: CVEs, write-ups, detection rules, lab builds. For PSIRT and AppSec, read a few recent FortiGuard PSIRT advisories so you can discuss the bug classes Fortinet itself ships fixes for. The security engineer interview guides collect prep by role; for comparison, see the Palo Alto Networks and Zscaler guides. Ask the recruiter early about the product team, the online test’s language, and the target P-level and RSU grant.

Frequently Asked Questions

Is the Fortinet interview hard?

The coding in public reports is mostly easy to medium, with an occasional hard problem. The harder part is doing it in C, then answering detailed questions on memory, sockets and protocols. The February 2024 Vancouver candidate solved every problem but the hard one and got no offer.

What language does Fortinet use in coding interviews?

C for most embedded and FortiGate roles. The April 2025 Burnaby candidate coded in C++, the 2022 DevOps candidate got Python and shell questions, and a November 2025 Vancouver team asked SQL and C#.

How much does Fortinet pay software engineers?

Levels.fyi puts the U.S. software engineer median at about $203K total compensation. Posted Burnaby developer bases run CA$94,000 to CA$140,000.

Does Fortinet hire new grads?

Yes. The 2026 Canada new-grad posting recruits for Burnaby and Ottawa across software, embedded, QA, DevOps, hardware and AV/IPS analyst roles, though it builds a pipeline and “does not represent an immediate vacancy.” Network support new-grad postings exist in Burnaby and Atlanta, and Sunnyvale has early-career engineering postings.

What does a Fortinet TAC interview cover?

Postings ask for TCP/IP, routing, L2/L3 switching, firewalls, IDS/IPS and VPN, and a U.S. TAC posting asks for four office days a week. The September 2026 Reddit report adds NSE4 and a closed-book test.