The first step was a take home assignment consisting of three parts (web app pentest + report, code review, OSINT). On the first agreed date, the test web app didn’t work. Had to agree on a new date. Quite basic stuff difficulty wise. After passing this stage, there was an interview with two security folks. The rejection email was a copy-paste message, no actual feedback.