cswork / libraryOpen practice workspace

Interview guides · Galileo

Galileo Software Engineer Interview Guide

Galileo Software Engineer interview guide: reported rounds, questions and how candidates describe the process.

The 60-second brief

A Software Engineer at Galileo plays a critical role in designing, building, and scaling the technology platforms that power modern digital experiences. Whether working on core financial infrastructure, high-throughput APIs, or intuitive mobile applications, engineers here are tasked with solving complex technical challenges that directly impact millions of end-users. The engineering team focuses heavily on reliability, security, and low-latency performance, making this role both highly demanding and deeply rewarding. In this position, you will contribute to critical product areas, which may include mobile client applications, robust backend services, and developer-facing APIs. The work requires a strong grasp of software design patterns, a commitment to clean code, and the ability to collaborate across functional boundaries.

This guide is scoped to a Software Engineer candidate at Galileo.

Focus areas

  • Take-home assessments
  • Project-based evaluation
  • Recruiter communication

The Galileo interview process

Galileo candidates report 4 rounds over 3-5 weeks. The stages below are what candidates describe, not a published process.

Recruiter Call

Brief conversation with a recruiter to discuss your background, career goals, and role expectations.

What to demonstrate

  • Brief conversation with a recruiter to discuss your background, career goals, and role expectations
  • Depth in Take-home assessments

How to prepare

  • Be able to walk your CV end to end in two minutes, and say why this company specifically.
  • Have your salary expectations, notice period and location constraints ready, and ask for the rest of the loop in writing.

Take-Home Assessment

Complete a take-home technical assessment simulating real-world tasks to showcase coding standards and architectural choices.

What to demonstrate

  • Complete a take-home technical assessment simulating real-world tasks to showcase coding standards and architectural choices
  • Depth in Take-home assessments

How to prepare

  • Answer aloud and timed: How do you manage asynchronous operations and state changes within a resource-constrained environment?
  • Answer aloud and timed: Walk through your strategy for writing unit and integration tests for the core business logic of your application.

Project Review

Engineering team reviews your submitted take-home project to determine if it meets their standards.

What to demonstrate

  • Engineering team reviews your submitted take-home project to determine if it meets their standards
  • Depth in Take-home assessments

How to prepare

  • Answer aloud and timed: How would you refactor a legacy, tightly-coupled component to make it modular and testable?
  • Answer aloud and timed: Explain the lifecycle of a core component in your primary development framework and how you prevent memory leaks.

Technical Interviews

Participate in a series of deeper technical and behavioral interviews focusing on project decisions and collaborative skills.

What to demonstrate

  • Participate in a series of deeper technical and behavioral interviews focusing on project decisions and collaborative skills
  • Depth in Take-home assessments

How to prepare

  • Answer aloud and timed: How does the operating system or runtime environment manage threading, and how do you ensure thread safety in your code?
  • Answer aloud and timed: Describe how you optimize network requests and payload sizes to ensure a responsive user experience over slow connections.

Where candidates lose points

Document Your Assumptions

When completing the take-home project, use the README file to document any assumptions you made, the architectural patterns you chose, and how you would scale the project if given more time. This demonstrates structured, strategic thinking.

Focus on Code Readability

Write self-documenting code with clear naming conventions and logical structuring. Avoid overly clever or complex solutions where simple, readable code is more maintainable.

Prepare Your STAR Stories

For the behavioral interviews, prepare stories using the STAR method (Situation, Task, Action, Result). Focus on outcomes and what you personally contributed to the success of the project or resolution of the challenge.

Questions & practice

How do you manage asynchronous operations and state changes within a resource-constrained environment?

Medium · Take-Home Project & Code Architecture

Approach

  1. Say what the runtime actually does before reasoning about the code.
  2. Name what is shared across threads and what owns each piece of state.
  3. Identify the window where an invariant is briefly untrue.
  4. Distinguish a value from a reference to it, and say which one you handed out.

Follow-up

  • What happens if two callers reach this at the same time?
  • Where could this allocate more than you expect?

How does the operating system or runtime environment manage threading, and how do you ensure thread safety in

Medium · Technical & Domain Expertise

How does the operating system or runtime environment manage threading, and how do you ensure thread safety in your code?

Approach

  1. Say what the runtime actually does before reasoning about the code.
  2. Name what is shared across threads and what owns each piece of state.
  3. Identify the window where an invariant is briefly untrue.
  4. Distinguish a value from a reference to it, and say which one you handed out.

Follow-up

  • What happens if two callers reach this at the same time?
  • Where could this allocate more than you expect?

Identify the heaviest tenants in a five-minute window under memory pressure

Medium · top-k · heavy hitters · streaming

The edge service handles about 3,000 requests per second across roughly 50,000 tenants, peaking near 9,000. Expose the 50 heaviest tenants by request count over the trailing five minutes so limits can be tightened before one tenant's backfill starves the fleet. You may not retain five minutes of raw records. Give the exact solution and its memory, then the bounded-memory approximation with its error stated as a formula, and say which you would ship and at what tenant cardinality that choice changes.

Approach

  1. Do the exact version first, because it is affordable at this cardinality: a ring of 300 one-second counters per tenant, advanced lazily, is 1,200 bytes of counters per tenant and roughly 60 to 90 MB for 50,000 tenants with overhead. Carry a running total and subtract the bucket you overwrite so a window read is O(1) rather than 300 adds.
  2. Extract the top 50 with a size-k min-heap over the tenant sums: O(d log k) for d tenants, against O(d log d) to sort them all. Maintaining the heap continuously instead of on query requires a tenant-to-heap-index map, because incrementing a count already inside the heap means sifting from a known position, and without that map you rebuild the heap on every request.
  3. State the approximation precisely rather than gesturing at sketches. Misra-Gries with m counters retains every item whose true count exceeds N/(m+1), and each retained count underestimates the truth by at most N/(m+1). With m = 1,000 and N = 900,000 requests in the window the error is roughly 900 requests, which is fine for spotting a tenant sending 50,000 and useless for ranking two tenants 200 apart.
  4. Say what breaks when the window slides: Misra-Gries and Space-Saving are insert-only and cannot be decremented as records age out. The workable construction is one summary per sub-window, say ten seconds, with 30 summaries merged at query time, and the merged error is the sum of the per-summary errors, so the bound degrades linearly in the number of sub-windows.

Follow-up

  • The heaviest tenant is heavy because of one export job rather than user traffic. Should the limiter treat those as the same tenant?
  • Two tenants sit tied at the boundary of the top 50. Does your answer flap, and does the flapping matter?

Keep soft-deleted accounts from blocking re-registration

Easy · soft delete · unique constraints · engine differences

app_user holds user_id, tenant_id, email CITEXT, password_hash (NULL for SSO principals), email_verified_at, auth_version, status ('invited','active','suspended','deactivated'), created_at, updated_at, deleted_at. Two live accounts for one address inside a tenant must be impossible, but an address freed by a soft delete must be reusable, and the same tenant may delete and re-register it repeatedly. Write the uniqueness DDL for PostgreSQL 16, then the equivalent for MySQL 8 where partial indexes do not exist, and say what each permits once three deleted rows already hold that address.

Approach

  1. Start from what is actually unique: not (tenant_id, email), but (tenant_id, email) among live rows. PostgreSQL says that directly — CREATE UNIQUE INDEX app_user_live_email ON app_user (tenant_id, email) WHERE deleted_at IS NULL. A full constraint over the same two columns burns the address permanently the first time someone deletes an account.
  2. Keep case-insensitivity in the type or the index, never in the application: CITEXT as given, or UNIQUE (tenant_id, lower(email)) as an expression index where the extension is unavailable. A case-sensitive unique column is exactly how two accounts for one human appear.
  3. For MySQL 8 the predicate has to move inside the key: add a discriminator column that is a constant 0 while the row is live and is set to user_id on delete, with UNIQUE (tenant_id, email, deleted_marker). Live rows share the constant and still collide; deleted rows differ from each other and stop colliding.
  4. State the NULL variant and its dependency: leaving the marker NULL for deleted rows also works, because a unique index treats NULLs as distinct — true in MySQL, and true in PostgreSQL only under the default NULLS DISTINCT, which PostgreSQL 15 lets you reverse. Check the polarity against the three existing deleted rows: constant-on-live is what preserves the collision you want, and reversing it silently admits duplicate live accounts.

Follow-up

  • A deleted account re-registers with the same address the next day. Do the old resource rows follow the new user_id, and how does the API keep the two principals apart?
  • How do you honour an erasure request while resource_revision.actor_user_id still references this table?

Stop tag and share joins from fanning out a page

Medium · join fan-out · semi-joins · many-to-many

resource_tag is (resource_id, tag_id) with PK (resource_id, tag_id); resource_share is (resource_id, shared_with_user_id, permission). The tagged-and-shared listing inner-joins resource to both, filters tenant_id, tag_id = ANY($2) and shared_with_user_id = $3, orders by updated_at DESC and takes 50. Pages come back with fewer than 50 distinct resources and the total in the header is far too high. Explain the row multiplication, rewrite both the page query and the count query so each is correct, and name the index each one needs. PostgreSQL 16.

Approach

  1. Do the arithmetic against the predicates that are actually there. An inner join emits one row per matching child row, and both joins are filtered: tag_id = ANY($2) admits only the requested tags, shared_with_user_id = $3 admits one user's share rows. So a resource holding three of the requested tags and shared with $3 once yields three rows, not one — the multiplier is its count of matching tags times its share rows for that single user, and that second factor is 1 unless the table admits duplicate (resource_id, shared_with_user_id) pairs. LIMIT 50 then limits rows rather than resources, and COUNT(*) counts pairs — the header is the product, not the population.
  2. Reject DISTINCT as the fix. It deduplicates after the product has been built, so the planner must materialise and sort the fanned-out set before the LIMIT can apply, and it leaves any SUM or AVG in the same select list wrong.
  3. Rewrite both filters as semi-joins, keeping resource as the only row source: AND EXISTS (SELECT 1 FROM resource_tag rt WHERE rt.resource_id = r.resource_id AND rt.tag_id = ANY($2)) and the same shape against resource_share. A semi-join stops at the first match per resource and preserves the driving index order, so ORDER BY updated_at DESC, resource_id DESC LIMIT 50 still stops after 50 rows.
  4. Count with the same predicates and no join at all: SELECT count(*) FROM resource r WHERE r.tenant_id = $1 AND r.status = 'active' AND EXISTS (...) AND EXISTS (...). Nothing multiplies a resource, so the number is the population.

Follow-up

  • The filter changes from 'any of these tags' to 'all of these tags'. Rewrite it and state what it costs relative to the ANY form.
  • A resource can be shared with the same user twice under different permissions. Does your count change, and should it?

Design a lightweight application that fetches data from a public API, handles offline caching, and displays it

Medium · Take-Home Project & Code Architecture

Design a lightweight application that fetches data from a public API, handles offline caching, and displays it in a structured user interface.

Approach

  1. Fix the scope first: who calls this, how often, and what they do when it fails.
  2. Name the read and write paths separately; they rarely have the same bottleneck.
  3. Choose a partition key and say what query it makes expensive.
  4. State the consistency you need, and where you are willing to be stale.

Follow-up

  • What breaks first when traffic grows ten times?
  • How does this behave when that dependency is down for an hour?

Explain the architectural patterns (such as MVVM, Clean Architecture, or Repository pattern) you chose for you

Medium · Take-Home Project & Code Architecture

Explain the architectural patterns (such as MVVM, Clean Architecture, or Repository pattern) you chose for your take-home project and why they fit the requirements.

Approach

  1. Fix the scope first: who calls this, how often, and what they do when it fails.
  2. Name the read and write paths separately; they rarely have the same bottleneck.
  3. Choose a partition key and say what query it makes expensive.
  4. State the consistency you need, and where you are willing to be stale.

Follow-up

  • What breaks first when traffic grows ten times?
  • How does this behave when that dependency is down for an hour?

Walk through your strategy for writing unit and integration tests for the core business logic of your applicat

Medium · Take-Home Project & Code Architecture

Walk through your strategy for writing unit and integration tests for the core business logic of your application.

Approach

  1. Say who the caller is and what they do when the call fails halfway.
  2. Define the identity of a request so a retry cannot double-apply it.
  3. Separate accepted, pending, failed and confirmed; they are different facts.
  4. Design the error taxonomy before the success shape; callers branch on it.

Follow-up

  • What happens if the caller retries after a timeout?
  • How does a client discover it is on an old version of this contract?

How would you refactor a legacy, tightly-coupled component to make it modular and testable?

Medium · Take-Home Project & Code Architecture

Approach

  1. Fix the scope first: who calls this, how often, and what they do when it fails.
  2. Name the read and write paths separately; they rarely have the same bottleneck.
  3. Choose a partition key and say what query it makes expensive.
  4. State the consistency you need, and where you are willing to be stale.

Follow-up

  • What breaks first when traffic grows ten times?
  • How does this behave when that dependency is down for an hour?

Describe how you optimize network requests and payload sizes to ensure a responsive user experience over slow

Medium · Technical & Domain Expertise

Describe how you optimize network requests and payload sizes to ensure a responsive user experience over slow connections.

Approach

  1. Clarify what is being asked and what a complete answer contains.
  2. State your assumptions explicitly before working the problem.
  3. Say what you would check first and why it is the highest-information step.
  4. Work from the requirement backwards to the design.

Follow-up

  • What assumption would you test first?
  • How would you know your answer was wrong?

What are the trade-offs between using third-party libraries versus building custom solutions for core applicat

Medium · Technical & Domain Expertise

What are the trade-offs between using third-party libraries versus building custom solutions for core application features?

Approach

  1. Clarify what is being asked and what a complete answer contains.
  2. State your assumptions explicitly before working the problem.
  3. Say what you would check first and why it is the highest-information step.
  4. Work from the requirement backwards to the design.

Follow-up

  • What assumption would you test first?
  • How would you know your answer was wrong?

How do you secure sensitive user data both in transit and at rest on a client device or server?

Medium · Technical & Domain Expertise

Approach

  1. Say who the caller is and what they do when the call fails halfway.
  2. Define the identity of a request so a retry cannot double-apply it.
  3. Separate accepted, pending, failed and confirmed; they are different facts.
  4. Design the error taxonomy before the success shape; callers branch on it.

Follow-up

  • What happens if the caller retries after a timeout?
  • How does a client discover it is on an old version of this contract?

Explain the lifecycle of a core component in your primary development framework and how you prevent memory lea

Medium · Technical & Domain Expertise

Explain the lifecycle of a core component in your primary development framework and how you prevent memory leaks.

Approach

  1. Establish what changed and when, before forming any theory.
  2. Pick a bisection that eliminates candidates whichever way it turns out.
  3. Check the instrumentation before believing the symptom.
  4. Separate the trigger from the cause; the deploy is rarely the bug.

Follow-up

  • What would you look at first, and what would it rule out?
  • How would you tell a cause from a coincidence here?

Recall a situation where you had to collaborate with a cross-functional team to resolve a critical production

Medium · Behavioral & Collaboration

Recall a situation where you had to collaborate with a cross-functional team to resolve a critical production issue.

Approach

  1. Establish what changed and when, before forming any theory.
  2. Pick a bisection that eliminates candidates whichever way it turns out.
  3. Check the instrumentation before believing the symptom.
  4. Separate the trigger from the cause; the deploy is rarely the bug.

Follow-up

  • What would you look at first, and what would it rule out?
  • How would you tell a cause from a coincidence here?

Suggested practice checklist

Built from the rounds and topics Galileo candidates report.

Day 1 — Map the Galileo loop

  • Write out the reported sequence: Recruiter Call, Take-Home Assessment, Project Review, Technical Interviews.
  • For each round, write one sentence on what it is judging, from the description above, and mark the one you are least ready for.

Deliverable: A one-page map of the 4 reported rounds, with the weakest marked.

Day 2 — Work Take-home assessments

  • Spend the session on Take-home assessments, which Galileo candidates report being tested on.
  • Write one worked example in Take-home assessments and time yourself on it.

Deliverable: One timed worked example in Take-home assessments.

Day 3 — Work Project-based evaluation

  • Spend the session on Project-based evaluation, which Galileo candidates report being tested on.
  • Write one worked example in Project-based evaluation and time yourself on it.

Deliverable: One timed worked example in Project-based evaluation.

Day 4 — Work Recruiter communication

  • Spend the session on Recruiter communication, which Galileo candidates report being tested on.
  • Write one worked example in Recruiter communication and time yourself on it.

Deliverable: One timed worked example in Recruiter communication.

Day 5 — Answer out loud: Take-Home Project & Code Architecture

  • Answer aloud, timed: Design a lightweight application that fetches data from a public API, handles offline caching, and displays it in a structured user interface.
  • Answer aloud, timed: Explain the architectural patterns (such as MVVM, Clean Architecture, or Repository pattern) you chose for your take-home project and why they fit the requirements.

Deliverable: Spoken answers to 2 reported Take-Home Project & Code Architecture question(s), under time.

Day 6 — Answer out loud: Technical & Domain Expertise

  • Answer aloud, timed: Explain the lifecycle of a core component in your primary development framework and how you prevent memory leaks.
  • Answer aloud, timed: How does the operating system or runtime environment manage threading, and how do you ensure thread safety in your code?

Deliverable: Spoken answers to 2 reported Technical & Domain Expertise question(s), under time.

Day 7 — Answer out loud: Behavioral & Collaboration

  • Answer aloud, timed: Describe a time when you received critical feedback on your code design. How did you handle it, and what was the outcome?
  • Answer aloud, timed: How do you manage your time and prioritize tasks when faced with a tight deadline and incomplete product specifications?

Deliverable: Spoken answers to 2 reported Behavioral & Collaboration question(s), under time.

Behavioural preparation

Behavioural rounds judge the decision you made and what it cost.

Describe a time when you received critical feedback on your code design. How did you handle it, and what was t

Medium · Behavioral & Collaboration

Describe a time when you received critical feedback on your code design. How did you handle it, and what was the outcome?

Approach

  1. Pick a story where you made the decision, not one where you watched it.
  2. State the situation in two sentences and spend the rest on the reasoning.
  3. Give the blast radius: what could have broken, and what you measured.
  4. Name the disagreement and how you resolved it with evidence.

Follow-up

  • What would you do differently if you ran that again?
  • How did you know your change caused the improvement?

How do you manage your time and prioritize tasks when faced with a tight deadline and incomplete product speci

Medium · Behavioral & Collaboration

How do you manage your time and prioritize tasks when faced with a tight deadline and incomplete product specifications?

Approach

  1. Pick a story where you made the decision, not one where you watched it.
  2. State the situation in two sentences and spend the rest on the reasoning.
  3. Give the blast radius: what could have broken, and what you measured.
  4. Name the disagreement and how you resolved it with evidence.

Follow-up

  • What would you do differently if you ran that again?
  • How did you know your change caused the improvement?

How do you handle disagreements with product managers or other engineers regarding technical debt versus featu

Medium · Behavioral & Collaboration

How do you handle disagreements with product managers or other engineers regarding technical debt versus feature delivery?

Approach

  1. Pick a story where you made the decision, not one where you watched it.
  2. State the situation in two sentences and spend the rest on the reasoning.
  3. Give the blast radius: what could have broken, and what you measured.
  4. Name the disagreement and how you resolved it with evidence.

Follow-up

  • What would you do differently if you ran that again?
  • How did you know your change caused the improvement?