Hacker Newsnew | past | comments | ask | show | jobs | submitlogin
Tech Hiring Lessons Learned (danielmiessler.com)
27 points by danielrm26 on Nov 28, 2011 | hide | past | favorite | 30 comments



If you're a developer, and someone asks for your credit score, refuse. Inform them that it's none of their business. If they demand it as part of their hiring process, get up and walk out of the interview. Whatever credit scores may signal about a candidate's future performance, the request for a credit score signals far more about the quality of an employer. You are not going to like working for any company that credit checks employees.

(You may get asked to authorize a credit check as part of a background check process; background checks can be reasonable, for instance if you're going to work for an exchange. But a background check happens after an offer is made; it's not part of the decision process.)

As always on threads like these, I like to plug our recruitment process, which we've been tuning for 4 years or so:

http://www.matasano.com/careers/

There's more to it than what's on the page, but, long story short, we do two interview phases separated by a battery of "challenges", calibrated to take about as much time as a serious on-site tech-out interview would take, but designed to be done in a candidate's spare time in bits and pieces if necessary.


As the article points out, the credit check is supposed to be one metric among many, and not taken as some overpowering data point. But for anyone to say that one's credit score does not proxy dependability is, I think, naive.

I think the notion that credit score is something invasive while work history, criminal record, GPA, determining how one got along with previous bosses, etc. is commonplace and goes unnoticed is somewhat odd. It should be obvious that employers have no interest in one's actual affairs, and instead are attempting to gauge dependability through proxies. GPA, how many times you've left jobs recently, insane rants on the internet -- these are all fair play and raise no eyebrows whatsoever, so why is a credit score any different?

This is a simple matter of being averse to things you're not used to and comfortable with those you are. Credit score bad! But pulling and evaluating your GPA, stalking your online footprint, looking into your criminal record, talking to your old bosses -- that's all fine. Sure, that will remain true until it becomes commonplace. At that point, just as with all these other things that most find completely unobjectionable, this won't bother anyone either. This is especially true when it's not even being considered as any sort of overriding decision point. Great candidates can have poor credit scores. Poor candidates can have high ones. Everyone knows this. But that can be said for all the other metrics gathered in an interview process as well.

And then there's the argument that credit score clearly can be asked for in certain jobs, e.g. financial services, but not others. This is highly curious. Why is it that one asks for credit scores when a position involves working with money? It's not a work competence question, to be sure -- it's a dependability metric: plain and simple. So I ask you: what is the difference between counting money somewhere and handling vulnerability data for the internal networks of Fortune 50 companies? Very little.

If the objection is that you don't like someone getting your credit score, then sure: I don't either. But I don't like the 10 other invasive activities that happen during any modern interview. It's all somewhat uncomfortable, which should be expected since the entire process reduces to evaluating your past and present to predict worthiness and fit for a given position. Complain about that if you wish, i.e. make the argument that interviews are too invasive to begin with, and perhaps I'll agree with you. That's a much better premise than taking one metric among others and claiming it alone is a problem.


We don't even disagree, because this isn't my point.

My point is: only bad dev shops are going to pull credit reports.

Good dev shops realize that from 2007 through today, including every one of the "RIP Good Times" months, it has been a nonstop hot- lead- flying- through- the- air battle for the best talent, and no place that truly wants the best talent is going to single themselves out by asking to pull credit reports to help make a decision about a hire.

Therefore: if you are asked for authorization for a credit report, your prospective employer is tacitly telling you: "we are second rate, don't work here". If you're second rate too and not particularly ambitious, sure, forgive them for their need to pull a credit report ("it's just another invasive thing"), and go work for a second-rate firm.

Edit:

I asked Twitter, and someone said they believe Apple and Google both ask for credit reports --- which is sad, but hard for me to rebut.


Thank you for your honesty in amitting that Google and Apple do this as well. I simply think you're unaware of how standard this practice is in hiring today--not just for high-end tech hiring but for any position where they're attempting to predict reliability.

To the point of the article, though, most probably don't eject someone from the process based on credit alone.


I don't know anyone from Apple, but I asked around to all of my Google peeps, and they all stated that Google absolutely doesn't do credit checks.

I have only actually done one interview where they asked for a credit report (and consequently the hiring manager wasn't allowed to extend me an offer based on the result, even though they tried for several weeks to make an exception).

I don't believe you that this is standard practice (although I can buy that it is "becoming more and more standard").


Google does not check credit score or history, at least not in the US and not for the role for which I was hired ~6 months ago. They did a criminal background check, but there was no credit inquiry. YMMV.


Thank you for your honesty in amitting that Google and Apple do this as well. I simply think you're unaware of how standard this practice is in hiring today--not just for high-end tech hiring but for any position where they're attempting to predict reliability

To the point of the article, though, most probably don't eject someone from the process based on credit alone.


Your point, as I am understanding it is something along the lines of, "as a responsible employer, it's incumbent upon me to gather as many data points about a candidate as possible; sure some of them may not correlate strongly with whether a candidate will be successful or not, but every bit helps me get a full picture." It's an understandable position to some extent, but here's the reason I think it rubs people (myself included) the wrong way: people discriminate between their public (read: work) lives and their private lives. Some of your data points are public, some are not. For example: the reason that no one has an issue with you calling my boss to discuss my history if I'm applying to you for a job is that you're discussing the public face I present at work each day: "Is this guy reliable? Does he make deadlines? Can he talk to clients or customers?" In other words all things that directly bear on how well I do my job. GPA is—to some extent simliar—it's the most useful metric in dealing with candidates who don't have work experience, and the underlying question is the same: this candidate's "job" for the last four years was getting her CS degree, so how good was she at it?

Social network stalking is a bit of a red herring. If a person has bad enough judgement that they leave a public record of (crazy|nasty|racist|sexist|etc.) sentiments, that's one thing. But would you the employer ask me the job candidate to friend you on Facebook because I've restricted my posts and photos to being viewed by friends only, and you want to rifle thorough them to find evidence anything objectionable? I doubt it. To me this is the same thing as asking for my credit score: why should I reveal my personal life to you? [1] At the risk of drawing too broad a point, this kind of thing is part of a continuing and subtle erosion of employees' right to their own private lives. Companies that ask me to work indefinite 60 hour weeks as a salaried employee are of a piece with those who want to know my credit score: they are companies that are asking for more of my life than I feel they have a right to, and I will pass them by. You may be OK with losing candidates who don't want to provide you their personal data, but if a credit score really is only a secondary (at best) data point, why risk losing an otherwise-superb employee over it?

[1] To those who say "a credit score isn't all _that_ personal, I think of two examples right off the top of my head. I decline to hire applicant A because his credit score was low. As is his right by law under FCRA, he asks to know if that was why we declined to hire, at which point he may then say "My credit score is poor because my wife left last year and I'm putting 3 kids through school," or "I'm HIV+ and my last job had terrible health insurance." There are lots of very personal reasons a person my have a bad credit score, and by basing a hiring decision on that, I'm forcing them to revel them to me if they want the job; that personally makes me very queasy.


The point is to ask the candidate about the low score, not to immediately disqualify him for it. Again, this is no different than being asked to explain a 2.5 GPA, or a horrible review from a former manager. Now you have to recant a number of highly unpleasant issues with your past boss in an attempt to illustrate why it wasn't your fault. In short, all three examples are likely to take one into personal territory, yet we are choosing credit as the one to fight about. My explanation of that phenomenon can be found above.


I certainly didn't take you to be suggesting not to hire the candidate based on their credit score, I'm saying it would make me uncomfortable to force them in to disclosing explanations for it in the first place because those reasons quite likely have nothing to do with how good of a candidate they are. What I was saying is that you might lose some good developers because they don't want to work for a company that would make such a request.

Anyway, I see your point, but this is where we part ways because I think that being asked to explain a 2.5 GPA or a horrible review from a former manager are materially different than being asked to explain a low credit score. Sometimes folks' personal and professional lives intersect in ways that require them to disclose more than they might want to to explain that bad GPA or bad review; that's unfortunate. But unlike GPA or a reference check, there is no "professional" component to your credit score that necessitates such disclosure, just as there is no professional component to one's religious affiliation or marital status. That the first of those things is sometimes legal to ask about (check your state's laws) and the rest are not doesn't make it OK. Anyway, I think we at least see where our disagreement lies; I take your point, but I just don't see a credit score in the same light.


Actually, I don't think the best dev shops ask GPA either.


Does an employer (or anyone) even need to "ask" for your score though?

They can just pull a credit report. Granted, they would need to know your SSN. It could be done as part of a background check and you wouldn't even know it happened unless you're tracking your credit events.


I believe they have to ask.

Incidentally, they have to ask to do real background checks too. Or at least, I've been asked every time my background checks have run, and they haven't been run until I faxed (ugh) a signed consent.


Completely agree; additionally there are legislative requirements on the employer if any decision is based on credit score (FCRA).


My question is: what has led current hiring practices, and specifically interviews, to be the way they are? I've been doing a job search recently, and to me at least, the process seems almost as arbitrary as management consulting interviews.

The common case is: (a) a (very nice) recruiter who largely doesn't understand your background calls to ask about which part of the company you should work in, then (b) you have a few phone interviews where you are asked what might as well be trick coding questions ("with some fancy bit manipulation this could be O(n)!") that are mostly collected in a few books or online anyway, and then (c) you do an on-site where you get another three to six of these questions, with maybe a simple "system design" question thrown in.

My hypothesis has been that the hiring process is largely aimed at Computer Science undergraduates with no significant prior work experience, and that the best way to distinguish just graduated CS undergrads is by testing them on the hardest class they are likely to have all taken: Introduction to Algorithms. Or maybe interviewing is just rarely rewarded and thus the lowest priority for engineers? In any case, insight into the design and implementation of this process would be really interesting.


For me, if you can't do the intro to CS stuff and write simple programs in an interview, that serves as a proxy that you can't do the advanced CS stuff and write complex programs on the job.

There are many many candidates who make it to the phone screen who can't Fizzbuzz. Also it can be difficult to separate out people who actually did significant work on a product on their resume from people who were just "on the team" and didn't contribute effectively.

Time is limited and resumes are full of lies and BS. But you can't BS your way through a program and make it run.


Looking at sample work is definitely a good idea. But I'd disagree with pretty strenuously with both credit score and IQ and would walk away immediately if a potential employer asked for these.

Re credit score: In the US this appears to be legal in some states, illegal in others, so as an employer I'd investigate carefully before asking asking for a credit dscore. But outside of of a banking industry job or a situation where one is attempting to obtain security clearance, this is pretty egregious. Plenty of families have had their credit wrecked by the recession and there are lots of reasons (e.g. unforeseen medical problems) that could result in a lowered score that have no predictive value whatsoever. So, even if what you're doing is legal in your locality, it's morally dubious outside of a certain types of jobs. Finally, it looks like this can cut both ways: "If you do agree to let [a prospective employer] see the report, and they base their decision not to hire you on something in it, you have the right under the Fair Credit Reporting Act to see it, says EFL’s Meschke. This will give you an opportunity to try to explain or rectify any issues or errors that may be on there." (http://www.msnbc.msn.com/id/31923358/ns/business-careers/t/c...)

As for IQ, there is literature out there on this subject (http://muse.jhu.edu/journals/merrill-palmer_quarterly/v047/4...). It's not that it has _no_ predictive value, but that there are a lot of confounding factors (e.g. the country you were raised in). Furthermore results need to be interpreted very carefully and I don't necessarily trust an employer to do that. I think a lot of people would rightfully see this is intrusive.

Having interviewed a fair number of job candidates in my time, I agree it's hard and there is definitely an art to it. But if someone can't get a accurate assessment of a candidate through sample work and direct interaction, and have to resort to things like credit score and IQ to help them decide, then they have no business interviewing candidates.


While you can't train experience, the value of experience decreases steeply over time. Sure someone at year 0 has less utility than someone at year 10, but the difference may all but disappear when comparing year 5 vs 10.

Edit: I started out as a BBS sysop. So you can see which side of the equation I'm on. The value of knowing how to admin door games is practically zero at this point.


This may or may not be true... it is an example of the old statement that I learned in martial arts"

There is a vast difference between having 10 years of experience, and having 1 year of experience repeated 10 times.

The reason there are often few differences between a 5-year career and a 10-year career is that most people find a niche after a few years, and comfortably sit there. But if you can find someone who spent 10 year actively learning and broadening their skills, never settling in... those extra 5 years are immensely valuable.


I think you can divide (useful) experience into two components: 1) a person's maturity as a programmer / team member, and 2) their level of practical knowledge with a given technology stack or your problem domain. I think that maturity is undervalued in this industry and is a must-have for senior developers. For practical knowledge, it can be extremely helpful to have someone who knows where the bodies are buried in the tech stack you are using. However, if you already have the knowledge on your team, then getting someone who can pick things up quickly might be a better focus.


I see where you're coming from but when I put myself in that statement it just doesn't work.

My now self, with nearer to 10 years experience would tear my 5 year experienced self to pieces on all things technical. I'm doing things now with great efficiency whereas 5 years ago I would probably have made a bit of a mess of them.

Though obviously at year 5, if asked, I would have happily told you I knew it all already :)


I'd be interested to know how common credit scoring applicants is. I understand why they'd be necessary for financial institutions but as a general method of filtering candidates it seems rather intrusive.


The conclusions the author draws are very similar to the conclusions the I/O Psychology community has proven scientifically. The best predictor of future performance is IQ and sample work product. Period.


Links?


My I/O psychology class in grad school :)

Seriously though, if you're interested in this, check out Applied Psychology in HR Management: http://www.amazon.com/Applied-Psychology-Human-Resource-Mana...


Examples make a huge difference. I try to keep a few personal projects around for people to look at so that I do not have to worry about proprietary code issues.


Good [insert profession here] can recognize good [insert profession here] by just having a real conversation with them, with a focus on listening.

Sure, there are outliers in the form of pathological liars and psychopaths, but these tend to gravitate towards professions with a major ego-boost factor (and they're often actually good at those professions).

Most of these kind of tips and "lessons" come down to: how to desperately compensate for being the wrong person to do the hiring in the first place.

Here's another tip: any experience professional who's skill is in demand will recognize such a flawed hiring process, understand that this is probably pervasive in the rest of the company, and run like hell in the opposite direction.


The IQ and grades part worry me. I had maybe a 2.9 out of 4.0 in university, and my IQ score has fluctuated between 127-134 depending on the day and test. I'm not the brightest person around, but I can do things, damn it :(


Your problem is not your iq, it's that you're too worried. 120+ is considered very smart, even for engineers.


Nothing beats "work samples", agreed. However, interviews should not be discounted. If interview is "deceptive" in your environment, you need to work on your questions. It took me about 10 face-to-faces with candidates in order to get my questions right. Couple of my own face-to-faces with other companies added even more insight into what I need to focus on in order to get better results for my questions.

Education is something that I always forget to look at while reading the resume.




Consider applying for YC's Fall 2025 batch! Applications are open till Aug 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: