We are hiring a Head of Technology for the garden3d creative collective, to lead engineering at Sanctuary Computer and garden3d in the era of agentic computer code. Original job posting link About garden3d We are worker owned creative collective, innovating on everything from brands and IRL communities to IoT devices and cross platform apps. We share profit, open source everything, spin out new businesses, and invest in exciting ideas through financial and/or in-kind contributions. Our client roster includes Google, Stripe, Figma, Hinge, Black Socialists in America, ACLU, Pratt, Parsons, Mozilla, The Nobel Prize, MIT, Gnosis, Etsy & Gagosian. Weâre the software team behind innovative products like The Light Phone & Mill, and we operate a global, decentralized community space collective called Index Space. We think of our garden3d as collective for creative people, prioritizing a happy, talented, and diverse studio culture. We work on projects that bring value to our world, and we balance deep care for the work we do with a genuine curiosity about life outside of our jobs. Sanctuary Computer - Development At Sanctuary Computer weâre building a different type of technology shop â one that prioritizes close collaboration between the client and the craftsperson. Our projects range from design-forward websites, to robust web apps, to native mobile development. XXIX - Design When we started XXIX in 2013, we set out to create a different kind of design studio and weâve thrived because we continually ask what a creative practice can be. Weâre building a radically different kind of organization that values autonomy, growth, transparency, and shared responsibility. Index - Community Index is network of physical spaces all around the world, Index provides space for the exchange of knowledge and tools. We nurture trust within the creative community through generosity and abundance of ideas and care. garden3d TK â Media At garden3d, weâre in the early stages of building an experimental media company exploring emerging themes related to the evolving landscape of technology, design and culture. We aim to monetize this outlet, publish books, produce screenplays, and release music. Plus, our partner organizations Lightphone Mill IngredientAI â°ï¸ The Head of Technology Role The garden3d Head of Technology has one mandate: everything we build works, holds up in production, and gets built the smartest way available to us. We are a house of brands - Sanctuary Computer (development), XXIX (design), Index Space (community), USB Club (digital community), and the garden3d umbrella itself - and a lot of what all of them ship runs on software we wrote. Working in close partnership with our founder & president Hugh Francis, this person sets the engineering standard, and builds the culture that holds it. You can be based anywhere. A lot of our people are in New York and there's some gravity here, but we already work across timezones and we would happily hire in Europe, Singapore, Chicago, or wherever you are. If you're the right person, we want to hear from you. This role works with studio leads, developers, designers, project managers and clients across every garden3d vertical. This person can move between a Rails migration, a Next.js app, a firmware release plan and an agent loop in the same week, and raise the bar on each of them. They span all of garden3d, but their home base is Sanctuary Computer, where roughly 70% of their time goes. Our development studio is where the engineering standard gets set, and where it either holds or slips: architecture, code review, estimation, and the hardest technical calls on our biggest projects. The other 30% goes to garden3d's broader technology story: how we ship product for USB Club, build with agents across the collective, which tools and platforms we bet on, and what we build for ourselves. They are also how we get better people. Our work is only as good as the engineers making it, so this person hunts for exceptional talent, sells them on us, and sets them up to do the best work of their careers. The ideal candidate looks at a worker-owned collective with four studios, an open P&L and clients like Google, Stripe, Brooklyn Museum and The Nobel Prize, and sees an engineering practice they can propel among the best in the world. Responsibilities & Mandates ï¸ Systems that hold up We build web apps, native apps, data pipelines, content platforms and connected devices for clients who can't afford for them to fall over. This person has engineered complex systems for a long time, and it shows in the architecture they draw before a line is written. They own the technical blueprint on our most important projects, and they make the hard calls on the rest: what to build, what to buy, and what to leave out. All in on agentic development The way software gets built changed, and we intend to be ahead of it. This person is already deep in it: loop engineering, agents running against evals, agents that open their own PRs, and the guardrails that make all of that trustworthy. They make agentic development the default way Sanctuary Computer works, and they can tell the difference between a demo and a system a team can rely on. Practical engineering We strongly prefer convention over configuration, boring technology, and platforms that let a small team ship a lot. TypeScript is the default language, Rails and Phoenix handle what they're best at, and we'd rather deploy to a platform like Render or Heroku than run our own infrastructure. This person practices value engineering: the simplest thing that works, built well, at a cost the client is glad to pay. Code quality at Sanctuary Computer Sanctuary Computer is where our engineering standard lives, so this is where most of their energy goes. They set what good code review looks like, keep our senior developers sharp on architecture and quality, and make sure that bar holds without slowing the team down. Hiring and empowering the very best They are a magnet for exceptional engineers. They know where to find them, how to convince them, and how to give them enough room to do their best work while still holding them to the standard. People who work for this person should get visibly better, and should say so. Estimation, scoping and delivery They make sure our teams can reliably estimate and story point the work ahead, and that we deliver at a pace that meets the dates we promised and protects our margins. When an estimate is wrong, they find out why and fix the process. The technical voice in new business Our clients include Google, Stripe, Figma, Mozilla and The Nobel Prize. This person joins new business calls as the trusted technical consultant, scopes the work, writes the technical side of proposals, and can explain a hard tradeoff to a client's CTO and their CEO in the same meeting. Hardware sense We're the software team behind The Light Phone and Mill, so a good share of our work touches devices. This person doesn't need to be a firmware engineer, but they understand how hardware works, where it constrains the software, and how to plan a project that spans both. The garden3d technology story Across the collective, they decide which tools and platforms we bet on, how every studio uses agents, and which internal tools are worth turning into products. When someone at garden3d asks "how should we build this?", this person has the answer, or knows who does. Culture They model garden3d's values of partnership, curiosity, and accountability. The engineers they lead do the best work of their careers here, because the feedback is honest, the recognition is earned, and the craft rubs off  Special Projects In addition to day to day responsibilities, hereâs an idea of some of the projects this role may spearhead or support in coming years â Making agentic development the default way Sanctuary Computer builds, with loops and evals the whole team trusts Setting the shared technical conventions every garden3d studio builds from Landing the kind of flagship engineering engagement that changes what people think we do Hiring the next generation of the engineering team, across every garden3d studio Turning the internal tools and agents we build for ourselves into products Partnering with the Head of Design so our own studio websites are as well engineered as they are designed Qualifications This is a great opportunity for someone looking to make a significant impact in a growing, dynamic company. Based on the responsibilities of this role, we think the right candidate has the following experience and skills: Must have: 12+ years building software, at least three of them leading engineers inside a studio, agency, startup or founder-led company Deep experience engineering complex systems, shipped and run in production: distributed services, data pipelines, multi-platform products A true technology generalist, comfortable across frontend, backend, data, infrastructure and native A strong preference for practical engineering: convention over configuration, boring technology, and platforms as a service over bespoke infrastructure All in on agentic development: loop engineering, evals, and agents doing real work in a real codebase Fluency across most of our stack: React, Next.js, Ruby on Rails, Elixir & Phoenix, Sanity, Postgres, Redis. You won't use all of it every week, but you should be able to review any of it Experience as the technical lead in winning work: scoping, estimating and pitching to clients A track record of hiring exceptional engineers, and of people who got measurably better working for them Hands-on. This person can still write the code, not only review it (and will get on the tools when the need arises) Nice-to-have: A sense of how hardware works: firmware, embedded systems, IoT, and shipping software for physical products Experience in a client services environment (a consultancy, agency or studio) Experience in a Sales Engineer or Solutions Architect role Open source projects they've started or maintained Experience fostering close collaboration between design and engineering teams Experience inside a worker-owned, open-book, or otherwise unusual company A network in the engineering community: the meetups, the conferences, the people worth hiring Interests in design, art, music, food or fashion. We find these people have a well rounded sense of quality Who you are The person weâre looking for is happy, relaxed and easy to get along with and appreciates a commitment to a culture of transparency, non-dictatorial leadership styles, and alternative methodologies. Theyâre flexible on anything except conceits that will lower their usually outstanding work quality. They work âsmartâ by carefully managing their workflow and team. How we interview After you submit your application, a member of our team will reach out. Our interview process starts with an intro call to answer any questions you have about the role and to learn a bit more about your experience and interests. From there, weâll follow up with a panel interview call where you get to meet a few members of our team, to openly discuss some of our challenges and ensure your skills and interests align with where weâre going as a business. For qualified candidates, the process wraps with a reference call, and an offer to follow. Compensation This is a permanent leadership role. If this individual exceeds expectations in their first four months, we'll shape the permanent role together, with scope and compensation that grow as the studios and their revenue do. After a period of proven success (12 - 24 months), they become eligible to join our worker ownership program. We start with a 4-month fraction trial contract, paid hourly between $110 - $175 p/hr pending seniority & experience. In the first few weeks of the trial, this individual will propose their own goals to define success in their trial, and present them to our leadership team for approval. At garden3d, we believe that those who shoulder the most responsibility and create the greatest impact should be paid accordingly. This role greatly favors autonomous, competent & ambitious operators. â How we work: We believe that thereâs a better balance between the poles of freelancing & full time, and for that reason we work differently to most shops: Transparency & Ownership :  We release out Profit & Loss statements to the community each year, open source our best ideas, and talk business & money with everyone in the company. Weâre proud to run our business with integrity, and for that reason we share everything with our team & community. 150% Carbon Negative : Our studio offsets 150% of the carbon we use to do business each year, dated back to our founding in 2015. We turn down work that is not in-line with our morals, and we encourage our peers to do the same. We have been certified climate neutral since 2021 . Strong Morals : Since our founding, we've turned down somewhere between $1mm - $2mm of work that didn't meet our moral standards. (Most of that was DTC brands that can't show a valid sustainability initiative). Async & Decentralized: We use tools optimized for calm, thoughtful communication, and opt for async whenever possible. We fight hard to maintain our focus time. Remote Friendly:  Our company is fluent in remote work, making our workplace more decentralized, and democratized in the process. Ideas & Products:  In our spare studio time, we work to build our own open source or internal products to diversify & bolster our income. We create amazing technology products for our clients, so why not for the studio? â Read more on our Substack, over here . How to apply Weâre excited to hear from you! ⤠Kindly submit a complete and thoughtful application, including relevant links that help verify your work experience and identity. Applications with missing or insufficient information will not move forward in the review process. Our team carefully reviews every complete submission, and we truly appreciate the time and effort you put into applying! :) Please mention the word **EXCELENT** and tag RMTM0LjE5NS4xMDEuMTkz when applying to show you read the job post completely (#RMTM0LjE5NS4xMDEuMTkz). This is a beta feature to avoid spam applicants. Companies can search these words to find applicants that read this and see they're human.
我们正在为garden3d创意集体招聘一名技术负责人,在智能体计算机代码时代领导Sanctuary Computer和garden3d的工程团队。原始招聘链接 关于garden3d 我们是一个由员工所有的创意集体,从品牌和线下社区到IoT设备和跨平台应用,无所不创新。我们共享利润,开源一切,孵化新业务,并通过财务和/或实物贡献投资于令人兴奋的想法。我们的客户名单包括Google、Stripe、Figma、Hinge、Black Socialists in America、ACLU、Pratt、Parsons、Mozilla、The Nobel Prize、MIT、Gnosis、Etsy和Gagosian。我们是The Light Phone和Mill等创新产品背后的软件团队,我们还运营着一个名为Index Space的全球去中心化社区空间集体。我们将garden3d视为创意人士的集体,优先营造快乐、有才华且多元的工作室文化。我们从事为世界带来价值的项目,我们在对工作的深切关怀与对工作之外生活的真诚好奇之间保持平衡。Sanctuary Computer - 开发 在Sanctuary Computer,我们正在打造一种不同类型的技术商店——一种优先考虑客户与工匠之间紧密协作的模式。我们的项目范围从设计导向的网站,到稳健的Web应用,再到原生移动开发。XXIX - 设计 当我们在2013年创立XXIX时,我们立志创建一种不同类型的设计工作室,而我们之所以蓬勃发展,是因为我们不断追问创意实践可以是什么。我们正在建设一种截然不同的组织,重视自主性、成长、透明度和共同责任。Index - 社区 Index是一个遍布全球的实体空间网络,Index为知识和工具的交流提供空间。我们通过慷慨以及丰富的想法与关怀,在创意社区中培育信任。garden3d TK — 媒体 在garden3d,我们正处于建立一家实验性媒体公司的早期阶段,探索与技术、设计和文化的演变格局相关的新兴主题。我们的目标是将这一渠道商业化,出版书籍,制作剧本,并发布音乐。此外,我们的合作伙伴组织 Lightphone Mill IngredientAI ⛰️ 技术负责人角色 garden3d技术负责人只有一个使命:我们构建的一切都能运行,在生产中经得起考验,并以我们可用的最聪明的方式构建出来。我们是一个品牌之家——Sanctuary Computer(开发)、XXIX(设计)、Index Space(社区)、USB Club(数字社区),以及garden3d本身这一伞形品牌——而它们所交付的很多东西都运行在我们编写的软件上。此人与我们的创始人兼总裁Hugh Francis紧密合作,制定工程标准,并建设维系该标准的文化。你可以在任何地方工作。我们很多人都在纽约,这里有一定的引力,但我们已经在跨时区工作,我们也很乐意在欧洲、新加坡、芝加哥或你所在的任何地方招聘。如果你是对的人,我们想听到你的消息。该角色与每个garden3d垂直业务的工作室负责人、开发者、设计师、项目经理和客户合作。此人可以在同一周内穿梭于Rails迁移、Next.js应用、固件发布计划和智能体循环之间,并提升每一项的标准。他们横跨整个garden3d,但他们的基地是Sanctuary Computer,大约70%的时间花在那里。我们的开发工作室是制定工程标准的地方,也是标准得以维持或滑落的地方:架构、代码审查、估算,以及我们最大项目上最艰难的技术决策。另外30%用于garden3d更广泛的技术叙事:我们如何为USB Club交付产品,如何在整个集体中借助智能体进行构建,我们押注哪些工具和平台,以及我们为自己构建什么。他们也是我们获得更好人才的方式。我们的工作质量取决于打造它的工程师,因此此人要寻找杰出人才,向他们推介我们,并让他们做好准备去完成职业生涯中最出色的工作。理想的候选人看着一个拥有四个工作室、公开损益表和Google、Stripe、Brooklyn Museum和The Nobel Prize等客户的员工所有制集体,看到的是一个他们能够推动其跻身世界最佳的工程实践。职责与使命 🛠️ 经得起考验的系统 我们为那些承受不起系统崩溃的客户构建Web应用、原生应用、数据管道、内容平台和互联设备。此人在复杂系统方面有长期工程经验,这体现在他们在写下一行代码之前所绘制的架构中。他们负责我们最重要项目的技术蓝图,并对其余项目做出艰难决策:构建什么、购买什么、舍弃什么。全力投入智能体开发 软件的构建方式已经改变,我们打算走在前面。此人已经深入其中:循环工程、针对评估运行的智能体、能自己提交PR的智能体,以及让这一切值得信赖的护栏。他们让智能体开发成为Sanctuary Computer的默认工作方式,并且他们能分辨演示与团队可以依赖的系统之间的区别。务实工程 我们强烈偏好约定优于配置、无聊的技术,以及能让小团队交付大量成果的平台。TypeScript是默认语言,Rails和Phoenix负责它们最擅长的领域,我们宁愿部署到Render或Heroku这样的平台,也不愿运行自己的基础设施。此人践行价值工程:最简单可行的方案,构建良好,成本让客户乐于支付。Sanctuary Computer的代码质量 Sanctuary Computer是我们工程标准所在之处,因此这也是他们大部分精力投入的地方。他们定义好的代码审查是什么样的,让我们的资深开发者在架构和质量上保持敏锐,并确保这一标准得以维持而不拖慢团队。招聘与赋能
---
> **给读者的说明**:这份 JD 表面上叫 "Head of Technology",但它**不是安全岗**,而是一个**创意开发工作室的工程负责人(Engineering Leader / VP Engineering 级别)**。你的服务对象是 12 年安全经验的安全总监,所以本报告会重点回答一个核心问题:**这个岗位到底适不适合他?** 结论会放在第 7、10 节,但请先读完背景科普,否则容易误判。
---
> 说明:这份 JD 是**开发工程**语境,不是安全语境。下表把每个术语按"在这份 JD 里的真实含义"解释,并说明"为什么这个岗位要它"。**注意:很多术语在安全行业里有另一层含义,我在"安全视角"一栏特别标注,避免你误读。**
| 术语 / 缩写 | 一句话通俗解释 | 为什么这个岗位要它 | 安全视角补充(给求职者) |
|---|---|---|---|
| **agentic computer code / agentic development** | 让 AI "智能体(agent)"不只是补全代码,而是能自主执行任务:自己读需求、改代码、跑测试、提 PR(合并请求),人只做审核和定规则 | JD 的核心卖点——"the era of agentic computer code",要求候选人把"用 agent 写代码"变成公司默认工作方式 | 安全上这是**新兴攻击面**:agent 有代码仓库写权限 = 供应链风险。你的安全背景在这里反而是稀缺加分项 |
| **agent loop / loop engineering** | "循环工程":设计 agent 反复"执行→评估→修正"的闭环,让它自己迭代到结果达标 | JD 明确要"loop engineering, agents running against evals" | 安全视角=给 agent 设"护栏(guardrails)",防止它越权改生产代码 |
| **evals(evaluations)** | 评估集:给 AI 输出打分的测试题库/标准,判断 agent 干得对不对 | "agents running against evals"——没有 evals 就无法信任 agent | 类似安全里的"检测规则/基线",思路相通 |
| **PR(Pull Request)** | 代码合并请求:开发者改完代码,发起请求让别人审核后再合并进主代码库 | "agents that open their own PRs"——agent 自己提 PR,人审核 | 安全上=代码评审是最后一道防线,agent 提 PR 需要更严的 review 策略 |
| **guardrails** | 护栏:给 AI/自动化系统设的边界规则,防止它做出危险动作 | "the guardrails that make all of that trustworthy" | **这是你安全背景最直接对口的词**——AI 治理/护栏本质是安全治理 |
| **Rails(Ruby on Rails)** | 一个老牌 Web 开发框架(Ruby 语言),"约定优于配置"的代表 | "Rails and Phoenix handle what they're best at"——公司技术栈之一 | 非安全概念,纯开发栈 |
| **Phoenix** | Elixir 语言的 Web 框架,擅长高并发、实时应用 | 同上,公司技术栈之一 | 非安全概念 |
| **Next.js** | 基于 React 的全栈 Web 框架(JavaScript/TypeScript 生态),做网站/应用的主流选择 | "a Next.js app"——公司主力前端/全栈栈 | 非安全概念 |
| **TypeScript** | JavaScript 的"带类型"版本,能在写代码时就发现类型错误,大团队协作标配 | "TypeScript is the default language"——公司默认语言 | 非安全概念 |
| **convention over configuration(约定优于配置)** | 一种设计哲学:框架给你定好默认规则,你少写配置,按惯例来就行 | JD 明确"strongly prefer convention over configuration"——偏好"少折腾"的工程文化 | 反映公司文化:务实、反过度设计 |
| **boring technology(无聊技术)** | 刻意选成熟、稳定、不炫技的技术,而不是最新最潮的 | "boring technology, and platforms that let a small team ship a lot"——小团队要高效 | 安全上=成熟技术漏洞少、可维护,**和你的"稳定优先"理念一致** |
| **Render / Heroku** | 托管式部署平台(PaaS):把代码推上去就自动部署,不用自己管服务器 | "we'd rather deploy to a platform like Render or Heroku than run our own infrastructure"——不想自建机房 | 安全视角:托管平台=把基础设施安全外包给平台方,你熟悉的"自建+双体系"在这里用不上 |
| **value engineering** | 价值工程:用最少的成本/复杂度做出"够用且好"的东西,客户觉得值 | "the simplest thing that works, built well, at a cost the client is glad to pay" | 本质是"成本-质量"权衡,和安全里的"风险-成本"权衡同构 |
| **firmware / firmware release plan** | 固件:烧在硬件设备里的底层软件(如 Light Phone 手机、Mill 设备) | "a firmware release plan"——公司做硬件相关软件,要懂固件发布节奏 | 安全视角:固件=IoT 安全重灾区(签名、OTA 更新、供应链),**你有 IoT/固件安全经验是加分** |
| **IoT devices** | 物联网设备:能联网的硬件(智能家居、可穿戴等) | garden3d 业务含"IoT devices",Light Phone/Mill 是硬件产品 | **安全强相关**:IoT 安全是独立赛道 |
| **native mobile development** | 原生移动开发:直接为 iOS/Android 写 App(非网页套壳) | Sanctuary Computer 业务范围之一 | 非安全概念 |
| **data pipelines** | 数据管道:把数据从 A 采集、清洗、搬运到 B 的一整套自动化流程 | "web apps, native apps, data pipelines, content platforms" | 安全视角:数据管道=数据安全/隐私合规战场 |
| **open P&L** | 公开的损益表(Profit & Loss):公司把财务账目对员工透明 | "a worker-owned collective with four studios, an open P&L"——工人所有制+财务透明 | 反映公司治理文化,非技术 |
| **worker-owned collective** | 工人所有制集体:员工共同拥有公司,共享利润 | garden3d 的核心身份——"We are worker owned creative collective" | 影响薪资结构(可能含股权/利润分成),见第 5 节 |
| **story point(故事点)** | 敏捷开发里估算工作量的单位(相对大小,不是小时) | "reliably estimate and story point the work ahead"——要求会做敏捷估算 | 项目管理能力,非安全 |
| **estimation / scoping** | 估算与范围界定:判断一个项目要多少人天、做哪些、不做哪些 | "Estimation, scoping and delivery"是独立职责 | 安全项目也需估算,可迁移 |
| **CTO / CEO** | 首席技术官 / 首席执行官 | "explain a hard tradeoff to a client's CTO and their CEO"——要能对高层讲技术权衡 | 沟通层级要求高 |
| **greenfield**(JD 未直接出现,但"spin out new businesses"隐含) | 全新项目/从零开始 | 推断:collective 会孵化新业务 | 见第 9 节隐藏信号 |
| **USB Club / Index Space / XXIX** | garden3d 旗下的子品牌:USB Club=数字社区,Index Space=全球实体空间网络,XXIX=设计工作室 | 岗位要跨这些品牌工作 | 非安全概念,是组织架构 |
| **Light Phone / Mill** | 公司参与开发的硬件产品(Light Phone=极简手机,Mill=厨余处理设备) | "the software team behind The Light Phone & Mill"——硬件相关软件是业务一部分 | **IoT/嵌入式安全相关** |
| **IngredientAI** | JD 末尾列出的合作/关联组织之一(AI 相关) | 说明 collective 在布局 AI | 非安全概念 |
| **Sanctuary Computer** | garden3d 旗下的**开发工作室**(本岗位 70% 时间所在地) | 岗位"home base" | 非安全概念 |
| **TK**("garden3d TK — Media") | 出版/编辑行业术语 "to come"(待定),表示该业务尚未命名/未定 | 说明媒体业务还在早期 | 非安全概念 |
| **ACLU / Mozilla / Gnosis / Etsy / Gagosian** | 客户名单:ACLU=美国公民自由联盟,Mozilla=火狐浏览器母公司,Gnosis=区块链组织,Etsy=手工艺品电商,Gagosian=高古轩画廊 | 证明客户质量高、跨行业 | 非安全概念,但**客户含 Mozilla/ACLU 说明对隐私/安全有隐性要求** |
> **⚠️ 关键提醒**:JD 里**没有出现** STIG / ATO / RLS / IaC / SBOM / Zero Trust / K8s 这些安全术语。这说明**这不是安全岗**。如果你带着"安全总监"的预期去读,会全程错位。本报告后续会反复回到这一点。
---
**这家公司做什么生意?**
garden3d 是一个**"创意技术集体(creative collective)"**,旗下有多个子品牌:
**卖给谁 / 怎么赚钱?**
**赛道阶段与竞争格局(基于行业常识,标注推断)**
---
**行业发展到什么阶段才会出现"Head of Technology"这种岗?**
---
**一句话**:为 garden3d 这个多品牌创意集体**定工程标准、带开发团队、把 agentic 开发变成默认工作方式、并在售前当技术顾问**的工程负责人。
**属于安全哪条线?** —— **不属于任何一条安全线。** 这是**工程管理线(Engineering Leadership)**,具体是:
> 如果硬要往安全框架里套,它最多沾一点"**AI 治理 / 供应链安全(agent 提 PR 的护栏)**"的边,但 JD 没有任何一条职责是安全职责。**这是本报告最重要的判断。**
---
**公司做什么**:见 0.2。核心是"创意技术集体",开发+设计+社区+媒体多品牌并行。
**规模阶段(推断)**:
**为什么现在招这个人(从 JD 措辞推断)**:
1. *"everything we build works, holds up in production"* → 推断:**近期有项目在生产环境出过问题,或交付质量不稳定**,需要有人来"守底线"。
2. *"All in on agentic development... we intend to be ahead of it"* → 推断:**公司判断 agentic 是竞争差异化点,需要一个能落地的人**,而不是停留在 demo。
3. *"They are also how we get better people... this person hunts for exceptional talent"* → 推断:**招聘是当前瓶颈**,小团队扩张需要强招聘者。
4. *"protects our margins"* → 推断:**估算不准/交付延期在侵蚀利润**,需要工程侧对毛利负责。
**市场发展(基于行业常识)**:
---
> 说明:JD 的 Responsibilities 用"标题 + 段落"形式,我逐条拆。**含金量**按"对职业发展的价值 + 对公司的关键度"综合评;**占比**为推断。
| # | JD 原文(节选) | 中文翻译 | 点评(什么活 / 含金量 / 占比推断) |
|---|---|---|---|
| 1 | *"Systems that hold up... They own the technical blueprint on our most important projects, and they make the hard calls on the rest: what to build, what to buy, and what to leave out."* | 系统要扛得住。在最重要项目上拥有技术蓝图,对其余项目做"建/买/不做"的硬决策 | **架构决策 + 技术选型**。含金量高(真正的技术领导力),但偏"应用架构"非"安全架构"。占比推断 ~20% |
| 2 | *"All in on agentic development... loop engineering, agents running against evals, agents that open their own PRs, and the guardrails... tell the difference between a demo and a system a team can rely on."* | 全面押注 agentic 开发:循环工程、agent 跑评估、agent 自己提 PR、以及让这一切可信的护栏;能区分"demo"和"团队能依赖的系统" | **本 JD 最核心的差异化职责**。含金量极高(前沿能力),也是**你安全背景唯一能强关联的点(guardrails/可信系统)**。占比推断 ~20% |
| 3 | *"Practical engineering... convention over configuration, boring technology... TypeScript is the default... deploy to Render or Heroku rather than run our own infrastructure... value engineering."* | 务实工程:约定优于配置、无聊技术、TypeScript 默认、托管部署、价值工程 | **工程文化定调**。含金量中(体现判断力),但技术要求偏"务实保守",与安全行业的"重基础设施"相反。占比 ~10% |
| 4 | *"Code quality... set what good code review looks like, keep our senior developers sharp on architecture and quality... without slowing the team down."* | 代码质量:定义好的代码评审标准,让资深开发在架构和质量上保持锋利,且不拖慢团队 | **代码评审体系 + 技术带教**。含金量高(直接影响交付质量),是"工程负责人"的日常核心。占比 ~15% |
| 5 | *"Hiring and empowering the very best... a magnet for exceptional engineers... know where to find them, how to convince them... People who work for this person should get visibly better."* | 招聘与赋能顶尖工程师:是人才的磁石,知道去哪找、怎么说服、给足空间又守住标准;下属应明显变强 | **招聘 + 团队建设**。含金量高(对小型组织是生死线),但**要求极强的个人招聘网络**,这是安全总监的弱项。占比 ~15% |
| 6 | *"Estimation, scoping and delivery... reliably estimate and story point... deliver at a pace that meets the dates we promised and protects our margins. When an estimate is wrong, they find out why and fix the process."* | 估算、范围界定与交付:可靠估算、按承诺日期交付、保护毛利;估算错了要复盘改流程 | **项目交付 + 毛利负责**。含金量中高(直接对 P&L 负责),偏"交付管理"非"技术"。占比 ~10% |
| 7 | *"The technical voice in new business... joins new business calls as the trusted technical consultant, scopes the work, writes the technical side of proposals, and can explain a hard tradeoff to a client's CTO and their CEO in the same meeting."* | 新业务中的技术声音:作为可信技术顾问参与售前电话、界定范围、写提案技术部分、能同时向客户 CTO 和 CEO 解释硬权衡 | **售前技术顾问(Pre-sales)**。含金量高(直接创收),要求极强的商业沟通力。占比 ~5-10% |
| 8 | *"Hardware sense... software team behind The Light Phone and Mill... understand how hardware works, where it constrains the software, and how to plan a project that spans both."* | 硬件感觉:懂硬件如何工作、如何约束软件、如何规划软硬结合项目(不要求是固件工程师) | **软硬结合项目规划**。含金量中(差异化能力),**与你的 IoT 安全经验有交集**。占比 ~5% |
| 9 | *"The garden3d technology story... decide which tools and platforms we bet on, how every studio uses agents, and which internal tools are worth turning into products."* | garden3d 技术叙事:决定押注哪些工具/平台、各工作室如何用 agent、哪些内部工具值得产品化 | **集体级技术战略**。含金量高(战略视野),但偏"工具选型"非"安全战略"。占比 ~5% |
| 10 | *"Culture... model garden3d's values of partnership, curiosity, and accountability."* | 文化:以身作则践行"伙伴关系、好奇心、责任感" | **文化布道**。含金量中(软性但关键),占比贯穿全程 |
| 11 | *"Special Projects... Making agentic development the default... Setting the shared technical conven[tions]"*(原文截断) | 特别项目:让 agentic 开发成为默认、设定共享技术约定 | **战略项目**。含金量高,是第 2 条的延伸落地。占比 ~5% |
**总体判断**:职责是**"工程 VP / Head of Engineering"的标准画像**——架构、质量、招聘、交付、售前、文化,六位一体。**没有一条是安全职责。**
---
| 要求 | JD 依据 | 说明 |
|---|---|---|
| **多年复杂系统工程经验** | *"has engineered complex systems for a long time, and it shows in the architecture they draw before a line is written"* | 必须是**亲手做过架构的工程师出身**,不是纯管理/纯安全 |
| **深度 agentic 开发实战** | *"already deep in it: loop engineering, agents running against evals, agents that open their own PRs"* | 不是"了解 AI",是"已经在用 agent 写生产代码并建护栏" |
| **TypeScript / Rails / Phoenix / Next.js 技术栈** | *"TypeScript is the default language, Rails and Phoenix..."* | 需能"在一周内切换 Rails 迁移、Next.js 应用、固件发布、agent loop" |
| **代码评审与质量体系能力** | *"set what good code review looks like"* | 要能定义并落地评审标准 |
| **招聘顶尖工程师的能力** | *"a magnet for exceptional engineers... know where to find them"* | 需有强个人技术人脉/招聘战绩 |
| **估算与交付管理** | *"reliably estimate and story point... protects our margins"* | 要对毛利负责 |
| **售前技术顾问能力** | *"joins new business calls... explain a hard tradeoff to a client's CTO and their CEO"* | 商业沟通 + 技术权衡表达 |
| **英语流利 + 跨时区协作** | *"You can be based anywhere... we already work across timezones"* | 分布式团队,英语是工作语言 |
| 要求 | JD 依据 |
|---|---|
| **硬件/固件项目经验** | *"a good share of our work touches devices... understand how hardware works"* |
| **软硬结合项目规划** | *"how to plan a project that spans both"* |
| **内部工具产品化判断** | *"which internal tools are worth turning into products"* |
| **多品牌/多工作室协同经验** | *"works with studio leads... across every garden3d vertical"* |
| **对工人所有制/合作社文化的认同** | *"looks at a worker-owned collective... and sees an engineering practice they can propel"* |
| **AI 治理/护栏/可信系统经验** | *"the guardrails that make all of that trustworthy"*(**你的安全背景在此加分**) |
| 要求 | JD 依据 | 弹性说明 |
|---|---|---|
| **base 地点** | *"You can be based anywhere... happily hire in Europe, Singapore, Chicago, or wherever you are"* | 完全远程,地点弹性极大 |
| **固件工程深度** | *"doesn't need to be a firmware engineer"* | 懂即可,不要求精通 |
| **具体技术栈广度** | *"can move between a Rails migration, a Next.js app, a firmware release plan and an agent loop"* | 要求"能切换",不要求每样都是专家 |
| **管理年限** | JD 未明说年限 | 从"Head of"推断需资深,但无硬性数字 |
---
**原文**:$140,000–250,000 / 年(USD)
**换算人民币(按 1 USD ≈ 7.2 CNY 粗算,标注为估算)**:
**与同类岗位市场水平对比**:
| 维度 | 判断 | 理由 |
|---|---|---|
| 美国市场(Head of Engineering @ 精品工作室) | **中等偏上** | 美国 Head of Eng 薪资区间通常 $150k–$250k+;此 JD 下限略低($140k),上限合理。对"小型精品工作室"而言属**有竞争力但不顶级**(大厂同级可到 $300k+) |
| 中国市场(对标"技术总监/工程 VP") | **偏高** | 中国同类工程负责人年薪约 ¥60万–¥150万;此岗上限 ¥180万 属**中国市场的头部水平**,但需注意这是"美元计价、可能按美国/全球标准" |
| 远程全球岗 | **中等** | 全球远程岗薪资常按"公司所在地"或"候选人所在地"调整;JD 未说明是否按地区调薪,**存在"按你所在地打折"的风险**(见第 9 节) |
**当地税后粗估(标注为粗估,实际因州/国而异)**:
---
| 项目 | JD 原文 | 分析 |
|---|---|---|
| **sponsorship(工签担保)** | 未提及 | JD 说 *"You can be based anywhere... happily hire in Europe, Singapore, Chicago, or wherever you are"*——**暗示以远程/合同形式雇佣,可能不涉及工签担保**。若你想去美国实体办公,需单独确认 |
| **clearance(安全许可)** | 未提及 | 无 |
| **right-to-work(工作权)** | 未提及 | 远程全球招聘通常要求候选人**自带工作权**(在其所在国合法工作),公司不代办 |
| **远程限制** | *"You can be based anywhere"* | **完全远程友好**,但需跨时区协作(纽约有"gravity") |
**结论:中国人可投性 = 🟡 黄灯(可投,但有前提)**
---
> 这个分数不是说你不够优秀,而是**岗位错配**。你是"安全治理/合规/架构"专家,这个岗要的是"应用开发工程管理 + agentic 开发"专家。两者交集很小。
**加分点(你能拿的分)**:
| 加分项 | 对应 JD | 价值 |
|---|---|---|
| **guardrails / 可信系统思维** | *"the guardrails that make all of that trustworthy"* | 安全治理的"控制点/护栏"思维可直接迁移到 AI agent 护栏设计,**这是你最强的差异化** |
| **IoT / 固件安全经验** | *"software team behind The Light Phone and Mill... understand how hardware works"* | 你有 IoT/嵌入式安全背景,能理解"硬件如何约束软件",**比纯 Web 工程师更懂设备侧风险** |
| **双体系认证 / 合规经验** | 隐含(客户含 Mozilla/ACLU,对隐私合规敏感) | 你能帮公司应对客户的安全问卷、隐私合规要求,**售前时是加分** |
| **带团队 / 管预算** | *"Hiring and empowering the very best... protects our margins"* | 你有团队管理和预算经验,**管理维度可迁移** |
| **向高层沟通** | *"explain a hard tradeoff to a client's CTO and their CEO"* | 你作为安全总监常向 CXO 汇报,**沟通层级匹配** |
**失分点(你拿不到的分)**:
| 失分项 | 对应 JD | 差距 |
|---|---|---|
| **无应用开发工程背景** | *"engineered complex systems for a long time... architecture they draw before a line is written"* | 你画的是"安全架构",不是"应用/系统架构";JD 要的是能设计 Web/移动/数据管道的工程架构 |
| **无 agentic 开发实战** | *"already deep in it: loop engineering, agents running against evals, agents that open their own PRs"* | 这是**最致命的缺口**——JD 要求"已经深度在做",不是"想学" |
| **技术栈不匹配** | *"TypeScript is the default... Rails and Phoenix... Next.js"* | 你大概率不写 TypeScript/Rails/Phoenix/Next.js 生产代码 |
| **无代码评审体系主导经验** | *"set what good code review looks like