Roughly two out of three people in the workforce aren’t looking for a job right now. That doesn’t mean they aren’t open to the right one. LinkedIn’s own data puts the share of workers actively job hunting at just 36%, which means the majority of the talent you need is sitting outside any “open to work” filter. Learning how to find passive candidates is the actual job of sourcing, since anyone can message people who already raised their hand.

The problem is that most recruiters’ idea of “passive sourcing” still means one thing: search LinkedIn, filter by title and years of experience, send an InMail, wait. That approach is getting worse, not better. InMail credits are limited, and the same 200 senior engineers in your metro area get the same templated message from twelve other recruiters this week.

This guide skips the LinkedIn-alternative debate (we’ve covered why LinkedIn Recruiter is failing recruiters and the pricing problem pushing teams to diversify elsewhere) and gets straight to seven sourcing channels and techniques you can use this week to reach people who aren’t scrolling job boards.

TL;DR

• About 64% of the workforce is passive, and passive candidates make up 69% of people who actually reply to well-targeted recruiter outreach. They’re not unreachable, just poorly targeted.
• For technical roles, GitHub, Stack Overflow, and open-source contribution history surface real skill signal that a resume or LinkedIn headline can’t.
• Niche Slack and Discord communities, conference speaker lists, and alumni networks put you in front of engaged practitioners before they’re job hunting.
• Referral and alumni network mining — done systematically, not with a Slack message asking “know anyone?”, is still one of the highest-converting channels available.
• AI-powered natural-language search lets you run all of these channels at once instead of manually checking six tabs, which is where tools like ConnectDevs fit in.

Why passive candidates are worth the extra effort

Passive candidates aren’t harder to hire because they’re uninterested. They’re harder to hire because they’re not looking where recruiters look. They’re not refreshing job boards, not updating an “open to work” badge, and definitely not opening a fifth InMail this month from a stranger.

But the data on what happens after you reach them is encouraging. In a 2026 analysis of over 400,000 candidate replies, Pin found that 69% of people who responded to recruiter outreach were not actively job hunting. Most described themselves as either “not looking” or “passive but open.” The same research found that candidates who’d recently changed roles or updated their profile replied at meaningfully higher rates, meaning timing and relevance matter more than volume.

Compare that to raw InMail performance: average response rates across industries generally fall in the 18-25% range, with talent acquisition specifically closer to 12%. Passive candidates respond, but only when the message and the channel are right. That’s the whole game.

1. Mine GitHub and Stack Overflow for real skill signal, not job titles

For engineering roles, a LinkedIn title tells you what a company called someone. A GitHub profile tells you what they can actually do. Commit history, repo README files, issue threads, and code review comments show depth of skill, communication style, and current interests — all things a resume filters out.

Recruiter scenario: You need a senior Rust engineer with distributed systems experience. Instead of searching LinkedIn for “Rust Engineer,” search GitHub for repos tagged with relevant frameworks (e.g., tokio, actix), sort contributors by recent commit activity, and look at who’s answering hard architecture questions on Stack Overflow’s Rust tag. You’ll surface people actively building in the language today, a much stronger signal than a five-year-old job title.

• Use GitHub’s advanced search to filter by language, followers, and recent activity.
• Check who maintains or frequently contributes to libraries your own stack depends on.
• On Stack Overflow, sort by reputation earned in the last 30-90 days, not lifetime reputation, to find people currently active.

2. Go where practitioners already gather: niche Slack and Discord communities

Every technical discipline has a handful of Slack workspaces or Discord servers where the real conversation happens, far more candid and current than anything posted publicly. Data engineering has Locally Optimistic and dbt Slack. DevRel has multiple invite-only Slacks. Design has communities built around specific tools. Product has Mind the Product and similar groups.

Recruiter scenario: A hiring manager wants a platform engineer who’s used Kubernetes at scale. Rather than another LinkedIn search, you join two or three Kubernetes-focused Slack communities, read the #careers or #jobs channel to see who’s helping others (a strong signal of seniority), and start genuine conversations in threads before ever mentioning a role.

• Join as a participant first, not a recruiter with a pitch. Most communities ban cold recruiting in public channels.
• Look for people who consistently answer other members’ technical questions; they tend to be senior and well-regarded by peers.

3. Turn open-source contribution graphs into a pre-vetted shortlist

Open-source activity is one of the few sourcing signals that’s both public and hard to fake. Someone with merged pull requests to a widely-used project has already been code-reviewed by strangers with no incentive to be generous.

Recruiter scenario: You’re hiring for a company that runs on a specific open-source framework (say, a popular JavaScript testing library). Pull up the project’s GitHub “Insights” tab, look at top contributors by commits and PRs merged in the last six months, and cross-reference their public profiles for location and current employer. This surfaces people who understand the exact tooling your team uses, often before that skill shows up on any resume.

• Prioritize contributors with merged (not just opened) pull requests. Merged code reflects accepted quality, not just activity.
• Track contributors to adjacent projects in the same ecosystem, since skills often transfer across related tools.

4. Turn conference speaker and attendee lists into a sourcing list

Conference speakers have self-selected as people confident enough in their expertise to present it publicly, and most conference sites publish full speaker bios, talk abstracts, and sometimes attendee lists or Slack/Discord communities tied to the event.

Recruiter scenario: You’re sourcing for a data science lead. Pull the speaker list from two or three recent data science conferences (PyData, relevant regional meetups, vendor-hosted summits), read talk abstracts to find people speaking on topics that map to your role, and reach out referencing the specific talk. “I watched your talk on feature store architecture” is a dramatically better opener than a templated InMail.

• Check conference apps and Sched/Whova-style attendee directories, which often list titles and companies even for people who didn’t speak.
• Meetup.com groups tied to a technology are a lower-effort version of the same tactic. Organizers and regular attendees are usually named publicly.

5. Mine your best employees’ and alumni networks systematically

Most referral programs stop at “let us know if you know anyone.” That leaves the actual mining work undone. Your best engineers’ GitHub followers, their conference co-speakers, and their former teammates at previous companies are a far richer pool than whatever names happen to come to mind when someone gets a Slack ping.

Recruiter scenario: Instead of a generic referral ask, sit with a top performer and go through their LinkedIn connections or GitHub follower list together, asking specifically: “Who on this list would you want to work with again?” Do the same with company alumni groups. Many companies have unofficial or official alumni Slack/LinkedIn groups where former employees stay loosely connected, and people who left on good terms are often warm to hearing from a former colleague turned recruiter.

• Search LinkedIn or company alumni pages for “worked at [target company]” plus your target skill for a fast way to find people with a specific employer pedigree.
• University alumni associations and alumni-only LinkedIn groups work the same way for early-career or specialized-degree roles.
• This kind of systematic network mining is really a talent-mapping exercise: mapping who exists and where before you ever reach out. If your team is doing this ad hoc, it’s worth reading how talent mapping, sourcing, and pipelining differ as distinct disciplines so the effort compounds instead of resetting every req.

6. Watch the conversation on X/Twitter and niche industry newsletters

Technical and specialist communities still have an active presence on X, often organized around hashtags, subject-matter Twitter lists, or reply threads under well-known accounts in a field. Industry newsletters (think Console.dev for engineering, Lenny’s Newsletter for product, or smaller vertical-specific ones) also have comment sections and referenced communities worth mining.

Recruiter scenario: You’re hiring a machine learning engineer with LLM evaluation experience. Search X for recent threads on evaluation frameworks, note who’s contributing substantive technical replies (not just retweets), and check their bio for current role. Subscribe to two or three newsletters in the space and track who shows up as a quoted expert or guest contributor over a few issues.

• Twitter/X “Lists” curated by well-known people in a field are a fast way to find who the community considers credible.
• Treat this channel as an ongoing watchlist rather than a one-time search. It rewards patience more than the others.

7. Use AI-powered natural-language search to run all six channels at once

Manually checking GitHub, three Slack communities, a conference speaker list, alumni groups, and X threads for every open req doesn’t scale past one or two roles at a time. This is the part of passive sourcing that’s genuinely changed in the last two years: natural-language, AI-driven search can now query across public profiles, code repositories, and professional activity signals the same way you’d describe a candidate to a colleague — “senior backend engineer, contributed to open-source Go projects, based in Austin, not actively applying anywhere”, instead of building a boolean string for one platform at a time.

Recruiter scenario: Instead of manually working through tactics one through six for every requisition, you describe the role and ideal background in plain language to an AI candidate sourcing tool, and it pulls and ranks candidates across the open web, surfacing enrichment signals like open-source activity and community involvement alongside standard profile data, so your team spends its time on outreach and conversations, not tab-switching.

• This is the core idea behind what makes a hiring platform AI-native rather than a search box bolted onto an old database: it’s built to search intent and signal, not just keywords.
• It also connects directly to why intent-based matching outperforms keyword search, since passive candidates rarely use the exact job title you’re searching for, so keyword matching misses them by design.
• The enrichment layer matters as much as the search. AI candidate enrichment is what turns a bare GitHub username or conference bio into a complete, verifiable profile you can actually act on.

Quick channel comparison

Putting it together: a realistic weekly sourcing mix

No single channel above replaces the others. They compound. A recruiter working a senior backend role might spend Monday running an AI-powered natural-language search to build an initial long list, Tuesday cross-referencing GitHub contribution activity for the strongest technical signal, and the rest of the week on warm outreach through alumni connections and community engagement for the top 15-20 names. The point is to stop treating LinkedIn search as the only tool in the kit.

If your process for tracking who you’ve mapped, sourced, and pipelined across these channels is a spreadsheet, that’s usually the first thing worth fixing. A talent intelligence platform built for how sourcing actually works today keeps that signal in one place instead of scattered across six browser tabs.

FAQ

What percentage of candidates are passive versus actively job hunting?

Roughly 64% of the workforce is passive at any given time, based on LinkedIn’s own data showing about 36% of workers are actively looking for a new role. That means the majority of qualified people for almost any role aren’t applying anywhere. They have to be found and reached directly.

Is it worth the effort to source passive candidates instead of just posting a job?

Yes, especially for senior or specialized roles where the strongest people are rarely browsing job boards. Research on candidate replies found that 69% of people who respond positively to recruiter outreach weren’t actively job hunting. The effort pays off when the message is targeted.

How do I message a passive candidate without sounding like spam?

Reference something specific and real: a conference talk they gave, a pull request they merged, a comment they made in a community you’re both part of. Generic “exciting opportunity” openers get ignored regardless of channel. Specificity is what separates a message that gets read from one that gets reported.

Do these tactics work for non-technical roles, or just engineering?

The channels shift, but the underlying logic works everywhere. Designers have Behance and Dribbble communities, product managers have Mind the Product and similar Slack groups, marketers have niche newsletters and X communities. The approach is the same: find where practitioners gather and demonstrate expertise publicly, then engage there before pitching a role.

How many sourcing channels should I actually use for one open role?

Two or three well-matched channels usually beat spreading thin across all seven. For a technical role, GitHub plus a relevant Slack community plus referral mining is often enough. Add conference or newsletter tracking for senior, hard-to-fill, or leadership-level searches where the pool is smaller and more visible.

How is AI-powered sourcing different from just automating LinkedIn searches?

Automating a LinkedIn search still only searches LinkedIn, and still relies on candidates using the keywords you searched for. AI-driven natural-language sourcing searches across the open web, including code repositories, professional activity, and public profiles, and matches on described intent and signal rather than exact keyword overlap, which is closer to how a good sourcer actually thinks about a role.

What’s the single highest-converting tactic in this list?

Referral and alumni network mining consistently converts best because there’s already a trust relationship, even a loose one. It’s also the most time-intensive to do well, which is exactly why it’s usually under-invested. Most teams ask for referrals once and stop rather than mining the network systematically.

The bottom line

Finding passive candidates isn’t about one clever trick. It’s about showing up where the people you want already spend their time, with something more specific to say than a templated InMail. GitHub activity, community involvement, conference presence, and network mining all surface people before they’re job hunting, and each one gets stronger when it’s not done from scratch for every single req.

The hard part isn’t identifying these channels — it’s running them consistently without burning your whole week on tab-switching. That’s the gap AI candidate sourcing is built to close. Explore AI candidate sourcing with ConnectDevs to see how natural-language search, enrichment, and matching work together across the channels above.