Node.js · Security · Tech Lead · Architecture
Lead: threat model a public Node API gateway.
Short Interview Answer
Enumerate STRIDE, trust boundaries, abuse cases (bots, SSRF, auth bypass), logging/PII, and WAF/rate-limit layers.
Detailed Explanation
Prioritize fixes by risk. Red-team auth and tenancy. Make security reviews part of architecture gates.