How AI Engineering Interviews Work
What interviewers score, the answer framework, behavioral stories and eight fundamentals questions with model answers.
Interviewers are not testing facts you memorized. They want to see how you think: can you pick the simplest solution, build it safely and explain your choices? Answer in the same order every time, and prepare real stories, especially one about something that broke.
- Framework
- A fixed order for your answer, so you never forget a part.
- Trade-off
- Choosing one benefit by giving up another.
- STAR story
- Situation, task, action, result: a simple way to tell an experience.
Prepare real stories, especially one about something that broke.
AI engineering interviews now look much alike. They are less about trivia and more about judgment. Can you take a vague business problem and pick the smallest technique that solves it? Can you show how you would build it safely, measure it honestly and keep it running? This path gives you about a hundred questions with strong model answers. It also gives you a design method, coding drills and a mock-interview plan. Use the answers to learn the shape and depth of a good answer. Then say them in your own words, from your own experience.
What interviewers are actually scoring
Interviewers look at six things. You do not need to be perfect at all of them. You need to show that you think about each one.
- Fundamentals: can you explain tokens, context, embeddings and inference without waving your hands?
- Judgment: do you choose an LLM, a workflow or an agent for good reasons? Can you say no to needless complexity?
- Engineering care: checks on input, permissions, safe retries, evaluation, monitoring and cost.
- Security mindset: do you treat what goes into a model, and what comes out, as untrusted?
- System design: requirements, trade-offs, failure modes and scale.
- Communication and ownership: a clear structure, honesty about doubt and real stories of things that broke.
The answer structure that works
Use the same order for every design question. It keeps you calm. It also lets the interviewer follow your thinking. Start by clarifying the question. Then state your requirements. Then give the simplest design that could work. Then follow the data through it, and say where it can fail. End with security, how you will measure it and the trade-offs.
For any "how would you design / handle X" question: 1. CLARIFY ask 2-3 questions: users, scale, cost of a wrong answer, data sensitivity, latency 2. REQUIREMENTS state them back, including non-functional ones (p95, cost per task, retention) 3. BASELINE the simplest design that could work 4. DATA FLOW walk it end to end; point out trust boundaries 5. FAILURE what breaks and how you detect and recover 6. SECURITY injection, exfiltration, authorization, tenant isolation 7. MEASURE evals, metrics, observability 8. TRADE-OFFS what you rejected and why; what you'd do at 10x For "explain concept X" questions: definition -> why it matters in production -> a trade-off or failure -> a concrete example. Never say "use an agent" as the architecture; explain why a workflow isn't enough.
Behavioral stories to prepare
Prepare five stories that you can adapt. Each one should follow the same three steps: the situation, what you did and the result. Put a number in each result.
- A system you shipped.
- Something that failed in production, and what you changed afterwards.
- A time you pushed back on needless complexity.
- A disagreement that you settled with data.
- A time you learned something fast.
The failure story is the most valuable. It shows judgment better than any success does.
Warm-up: LLM fundamentals
Start here. These eight questions cover the basics that almost every interviewer asks. Answer each one aloud first. Then compare with the model answer. Notice that strong answers do not stop at the definition. They also say why it matters in production.
Q1What is the difference between training and inference?show answer
In plain words: Training teaches the model by changing its inner settings. Inference is just using the finished model to answer. Most app builders only work on inference.
Full answer · Training updates a model's parameters using data and an optimization procedure; inference uses the trained, fixed model to produce an output for a new input. As an application engineer you mostly work at inference time — prompts, retrieval, tools, state, evaluation, security and serving — while training/fine-tuning is a separate, much costlier activity you only choose when prompting and retrieval can't meet the requirement.
Q2Why does tokenization matter for cost and context?show answer
In plain words: Models read tokens, not words, and you pay per token. The same message can cost more in code or other languages, and the limit is counted in tokens too.
Full answer · Models read tokens, not characters or words, and both billing and context limits are counted in tokens. Code, JSON and non-English text usually tokenize less efficiently, so the same information can cost far more than its character count suggests. It also affects chunking: split by tokens, not characters, and count tokens on your real prompts, tool schemas and tool results — in an agent loop they're re-sent each turn.
Q3What is an embedding and why is it useful?show answer
In plain words: An embedding turns text into numbers that capture its meaning. So you can find text that means the same thing, even if the words are different.
Full answer · An embedding maps content such as text to a vector so that semantically similar items sit near each other; similarity (often cosine) lets you search by meaning rather than keywords. It powers retrieval, clustering and deduplication. An embedding model is different from a generative model, and quality depends on the model, chunking and metadata filtering as much as on the vector database. Changing the embedding model means re-embedding the corpus, so version it.
Q4Why can a model be confident and wrong?show answer
In plain words: The model writes likely-sounding text, and nothing in it checks the facts. So it can sound sure and still be wrong. That is why you verify.
Full answer · It generates likely continuations, not verified facts, and nothing in the generation process checks truth; fluent text is produced whether or not it's correct. It may lack current or private information, misread an ambiguous request, or fill gaps plausibly. So production systems treat output as an untrusted proposal: ground it with retrieval and citations, constrain it with schemas, verify it with deterministic checks or tests, and escalate when uncertain.
Q5What factors influence model selection?show answer
In plain words: Test the models on your own tasks and compare quality, speed, cost and safety. Use small models for easy jobs and bigger ones for hard jobs.
Full answer · Quality on your actual tasks, tool-use and structured-output reliability, latency, cost per successful task, context length, privacy and residency requirements, availability and rate limits, and safety behavior. The method matters more than the list: build an evaluation set from your workload, compare candidates, route by capability (small model for classification/extraction, stronger for hard reasoning), pin versions, and test fallbacks. Don't pick from leaderboards alone.
Q6Is a bigger context window a replacement for retrieval?show answer
In plain words: No. Reading more text costs more and can hide the important part. Search finds the right pieces, so you use a small, relevant set.
Full answer · No. Long contexts cost more, add latency and can bury relevant facts among noise or conflicting text, so relevance degrades. Retrieval selects what matters, supports access control and freshness, and lets you cite sources. Long context helps when you genuinely need to reason over one large, coherent document; it isn't a substitute for a search system over a corpus.
Q7Explain transformers conceptually, without pretending attention is magic.show answer
In plain words: Each word looks at other words in the text to understand them. That is why longer text costs more, and why more text is not always better.
Full answer · A transformer represents each token as a vector and, in each layer, lets tokens exchange information through attention: each token computes weights over other positions and mixes their representations, with multiple heads learning different relationships. Feed-forward layers transform the result; residual connections and normalization keep deep stacks trainable. The practical consequences are that cost grows with context length, order and position handling matter, and more text isn't automatically more information.
Q8When is an LLM the wrong tool?show answer
In plain words: When there is one exact right answer you can compute, or when you need strict, checkable rules. Then use normal code, not a language model.
Full answer · When there is a single right answer you can compute (arithmetic, exact lookups, date logic), when strict determinism or auditability is required (eligibility rules, permissions), when a classical model or simple rules suffice for a prediction task, or when latency and cost budgets rule out a model call. A good answer names the smallest technique that fits and shows where an LLM might still help at the edges, such as extraction or explanation.
- ✓Interviews score judgment, care, security thinking, design and communication. They do not score trivia.
- ✓Use one fixed answer structure: clarify, requirements, simple design, data flow, failures, security, measure, trade-offs.
- ✓Prepare five stories. Include a production failure and what changed afterwards.
- ✓Explain fundamentals through what they mean in production.
Record yourself answering three fundamentals questions
- Pick three questions from the warm-up. Answer each aloud in 90 seconds without notes, and record it.
- Listen back. Did you give a production effect and a trade-off, or only a definition?
- Rewrite each answer in four parts: the definition, why it matters in production, a failure or trade-off, and an example. Record it again.
- Write your five stories as short bullet points, with one number in each.