Technical depth
Check fluency in fairness metrics (equalized odds, demographic parity), explainability tooling such as SHAP or LIME, and frameworks like NIST AI RMF or ISO 42001 clauses.
Evidence to listen for
- Command of the specific attack surface, tooling, and controls the role covers
- Understands how the underlying system works, not just how the tool reports on it
- Can explain an attack or control chain end to end
- Distinguishes what they found themselves from what a scanner flagged
Five-point scoring guide
Tool operator only; no understanding of the systems underneath.
Runs tooling but cannot explain findings or how the attack works.
Solid working knowledge; depth thins outside familiar tooling.
Strong command of the domain; explains attack and control chains clearly.
Names specific metrics and thresholds used, explains where SHAP misleads, and maps controls to NIST AI RMF or ISO 42001 requirements.