--- title: Find hidden candidates with niche technology experience description: Use TheirStack technographic data to identify companies using a specific platform in your target market, then cross-reference with LinkedIn Recruiter to surface candidates whose hands-on expertise doesn't appear on their profile. url: https://theirstack.com/en/docs/guides/how-to-find-hidden-candidates-niche-technology --- ## The problem with sourcing niche tech talent When you're hiring for a niche platform — OneStream, Workday, Veeva, a specific ERP or CPQ tool — the candidate pool is small and well-known. Everyone contacts the same people. The candidates who list the technology on their LinkedIn profile have already been approached by every recruiter in the market. But there's a larger group of candidates who have hands-on experience and are invisible: **people who simply never updated their profile to reflect a platform they use daily at work**. A Finance Systems Analyst at a company running OneStream knows OneStream — even if their LinkedIn says nothing about it. TheirStack lets you map which companies in your target geography run a specific platform, so you can find these hidden candidates by proxy: instead of searching for the skill, you search for the company context. ## How it works The workflow has three steps: 1. **Map companies using the target technology** in your geography using TheirStack's technographic search 2. **Export or copy the [company list](/en/docs/app/company-lists)** 3. **Open LinkedIn Recruiter**, filter employees at those companies by job title, and reach out Every person with the right title at one of those companies is a strong candidate — whether or not the technology appears on their profile. ## Step-by-step walkthrough 1. **Search for companies using the target technology** Go to [Company Search](/en/docs/app/company-search) and add two filters: - **Technology** → includes → _your target platform_ (e.g. "OneStream", "Workday", "Veeva") - **Location** → country or city where you're sourcing TheirStack detects technology usage from job postings: if a company has ever posted a role requiring that platform, it appears in your results. You can see how many job mentions back each signal — more mentions means higher confidence. [Open company search](https://app.theirstack.com/search/companies/new) 2. **Explore the company profile to validate** Click on any result to open the company profile. You'll see: - All jobs ever posted by that company mentioning your target technology - The date range of those postings (recent vs. historical) - The full list of technologies detected across all their job postings This lets you quickly judge whether the signal is current and strong enough to warrant outreach — or whether it was a one-off mention years ago. For more on how to read a company profile, see [how to discover the tech stack of any company](/en/docs/guides/how-to-discover-tech-stack-of-any-company). 3. **Copy the company list to LinkedIn Recruiter** Once you have your filtered company list: 1. Click **Export** to download a CSV with company names and domains, or use the **LinkedIn Recruiter** integration to import the list directly 2. In LinkedIn Recruiter, filter employees at those specific companies by **job title** (e.g. "Finance Systems Analyst", "ERP Developer", "Business Systems Manager") Every person with the right title at one of these companies is a strong candidate by inference — they work at a company that actively uses your target platform, in a role that involves that platform daily. 4. **Prioritize and reach out** Sort your shortlist by: - **Tenure at the current company**: Longer tenure means deeper platform experience - **Job title seniority**: Match seniority to the role you're filling - **Previous companies**: Other companies in your TheirStack list on their work history confirms cross-company platform experience Reach out with context. Mentioning that you know their company uses the specific platform — without it being on their profile — immediately differentiates your message from every generic recruiter note they receive. ## Why this works better than keyword search Searching LinkedIn for "OneStream" as a keyword only returns candidates who explicitly wrote it on their profile. The same logic applies to any niche enterprise platform: most users never bother to list the internal tools they work with. Searching by company context flips the model: | Keyword search | Company-context search | | --- | --- | | Only finds candidates who listed the skill | Finds everyone at a company using that platform | | Small pool, heavily contacted | Larger pool, mostly untouched | | Works for popular technologies | Works especially well for niche platforms | | No signal about current usage | Company's job history confirms active usage | For niche platforms with small installed bases, the company-context approach can surface 3–5× more candidates than keyword search alone. ## Bonus: use the same data for BD The same company list you built for candidate sourcing is a ready-made business development list. Every company using the platform is a potential client: they may need to hire, and you're the recruiter who specializes in exactly that technology. When reaching out for BD, you can reference the platform by name and speak specifically to the scarcity of available talent — a concrete, credible reason to bring in a specialist firm rather than sourcing in-house. See [targeting companies with active job openings](/en/docs/guides/how-to-outreach-on-autopilot-to-companies-actively-hiring) for how to layer [hiring signals](/hiring-signals) on top of your technographic list. ## Further reading [/docs/data/technographic](/docs/data/technographic)[/docs/guides/how-to-discover-tech-stack-of-any-company](/docs/guides/how-to-discover-tech-stack-of-any-company)[/docs/guides/how-to-build-lead-lists-with-technographic-data](/docs/guides/how-to-build-lead-lists-with-technographic-data)[/docs/guides/how-to-target-companies-by-technology](/docs/guides/how-to-target-companies-by-technology)