Back to case study

Cyberr Technical Tests

Research scripts 

Scripts for discovery interviews and moderated usability tests on Technical Tests, with candidates and clients. Sample sizes and findings are in the Listening to both sides section of the case study.

Recruiting criteria 

Candidates, junior/mid
Screener
Early-career cybersecurity professionals active on Cyberr
Quota
3 interviews, 3 tests
Candidates, senior
Screener
Experienced professionals with certifications on their profile
Quota
3 interviews, 2 tests
Clients
Screener
Recruiters and hiring managers who recently hired for a cybersecurity role
Quota
5 interviews, 5 tests

Mix freelance and permanent candidates in each group.

1. Candidate discovery interview (45 min) 

Intro. Thank you for joining. We’re exploring how cybersecurity professionals show their skills to employers. There are no right or wrong answers; we’re testing ideas, not you. May I record the session for notes only?

Background

  1. 01Tell me about your current role and what you work on day to day.
  2. 02What kind of work are you looking for right now?

Proving skills today

  1. 03Tell me about the last time an employer asked you to prove your technical skills. What happened?
  2. 04How did you feel about that test? What made it fair or unfair?
  3. 05Which certifications or practice platforms do you mention to employers? Do you think they look at them?
  4. 06What does an employer miss about you when they read your CV?

Attitude to testing

  1. 07Imagine a practical test on Cyberr whose results employers can see. What’s your first reaction?
  2. 08What would make you start such a test today? What would make you postpone it?
  3. 09What do you need to know before you commit your time to a test?
  4. 10How would you feel if your result were lower than expected? Who should be able to see it?
  5. 11How do you feel about leaderboards and rankings in your field?

After the test

  1. 12You’ve finished a test on an external platform. What do you expect to happen next?
  2. 13What would you like to see in your results? What would you do with them?

Wrap-up. If you had a magic wand, what would make proving your skills easier? Is there anything we didn’t ask that we should have?

2. Client discovery interview (45 min) 

Background

  1. 01Which cybersecurity roles or projects have you hired for recently?
  2. 02Walk me through your process from shortlist to offer.

Screening today

  1. 03Tell me about the last time a hire turned out weaker than expected. What did you miss?
  2. 04How do you check technical skills today? Who does it, and how long does it take?
  3. 05Which signals do you trust most: certifications, experience, referrals, test results? Why?
  4. 06Have you used any testing platforms? What worked and what didn’t?

Value of a test result

  1. 07A candidate scored 70% on a practical pentest. What does that tell you? What else would you need?
  2. 08How do you choose between two candidates with similar experience?
  3. 09At which point of your process would you send a test? To whom?
  4. 10How would you like to compare candidates after a test?
  5. 11How much would you pay for a test, and who should pay: you or the candidate?

Wrap-up. What would make you trust a test result enough to shorten your own technical interview? What would make you ignore it?

3. Candidate usability test (40 min, Figma prototype) 

Setup. Please think out loud. If you get stuck, tell me what you expected to happen. You can’t break anything.

Scenario. You’re looking for new projects and want employers to see your practical skills.

#1
Task
Find where you can take a technical test
Success criteria
Opens Technical tests from the sidebar
Watch for
Hesitation between other menu items
#2
Task
Choose a test that fits your level in your area
Success criteria
Opens an area and picks a level, explaining why
Watch for
Whether the level scale and time are understood
#3
Task
Find out what you’ll need to do in the test
Success criteria
Opens details and names the environment and topics
Watch for
Trust in the instructions; length of the panel
#4
Task
Start the test
Success criteria
Presses Start mission and understands they leave Cyberr
Watch for
Expectations about coming back
#5
Task
You’ve come back. Check where your test stands
Success criteria
Finds Pending tests and reads the time left
Watch for
What they think “pending” means
#6
Task
Review your result and decide whether employers should see it
Success criteria
Reads the breakdown and finds Publish on my profile
Watch for
Fear of publishing; meaning of the numbers
#7
Task
Find out how you rank against others
Success criteria
Opens the leaderboard and finds their own row
Watch for
Reaction to a low rank
#8
Task
Find out what you need for the next league
Success criteria
Reads the progress card
Watch for
Whether the goal feels reachable

After each task: “How easy or hard was that, from 1 (very hard) to 7 (very easy)?” (SEQ)

Debrief. What was the most confusing moment? Would you take this test for real? What would stop you? Finish with the SUS questionnaire.

4. Client usability test (30 min, Figma prototype) 

Scenario. You’re hiring a pentester for a project and already have a shortlist.

#1
Task
Send a technical test to candidates from your shortlist
Success criteria
Finds Send test in the project’s shortlist
Watch for
Where they expect the action to be
#2
Task
Choose who should get the test
Success criteria
Selects candidates using the list data
Watch for
Which columns they rely on
#3
Task
Pick a test that fits the project
Success criteria
Opens an area, checks details and the Questions tab, selects a test
Watch for
Whether they understand what candidates will face
#4
Task
You’ve run out of tests. Get more
Success criteria
Finds Buy more tests and completes the purchase panel
Watch for
Clarity of who pays and what’s included
#5
Task
Decide which candidate did best
Success criteria
Opens Test results and compares candidates per question
Watch for
Whether they read per-question marks or just the overall score
#6
Task
Invite the strongest candidate to an interview
Success criteria
Uses Book a meeting
Watch for
Whether this feels like the natural next step

Debrief. Would you trust this result in your hiring decision? What’s missing?

Metrics to report 

  • Task success rate per task
  • Time on task for sending a test and finding a result
  • SEQ per task and SUS overall
  • Usability issues by severity, round 1 vs round 2