How to Find Passive Candidates on LinkedIn Without Recruiter

Most of the best people you want to hire are not looking. They have a job, they are good at it, and their LinkedIn profile says “Senior Engineer at Lumera Labs” and almost nothing else. These passive candidates never show up in your inbound. You have to go find them, and you can, even on LinkedIn Basic, without a €835/mo Recruiter seat.

This is a tactical guide. Below are the specific moves that work on a free or Premium account, plus the one problem that quietly costs you the best passive candidates: the bare profile.

Want early access? SourceLens is pausing new sign-ups for a short while. Join the waitlist and you’ll be first in when we reopen.

Who counts as a passive candidate, and why bother

A passive candidate is someone qualified for your role who is not actively applying anywhere. They are not on job boards. They have not turned on “Open to work.” If you want them, you reach out first.

They are worth the extra effort for a few plain reasons. They are usually still employed, which means someone else already vetted and kept them. They are not fielding ten other offers, so a well-aimed message lands. And because most recruiters chase the same active 10%, the passive pool is far less picked over. The work is in finding and reading them, not in beating a queue.

1. Boolean search in the standard search bar

You do not need Recruiter’s filter panel. The normal LinkedIn search bar accepts boolean operators on a free account.

Combine terms with AND, OR, NOT, parentheses, and quotation marks:

“Data Engineer” AND (Python OR Spark) AND (“Amsterdam” OR “Utrecht”) NOT recruiter

The NOT recruiter at the end keeps other sourcers and agency profiles out of your results. Quotation marks force exact phrases. Parentheses let you say “either of these skills.” Start broad, read the first page, then tighten one term at a time.

If you want the operators laid out properly, our boolean search guide with worked LinkedIn examples walks through the patterns. And if writing strings by hand is the part you dread, the LinkedIn Search Builder turns a job description into ready-to-paste boolean queries.

2. X-ray search through Google

LinkedIn’s free search caps how deep you can page and sometimes hides results behind the “commercial use limit.” Google does not care about any of that.

Search Google directly against LinkedIn:

site:linkedin.com/in “site reliability engineer” “Berlin” (Kubernetes OR Terraform)

This pulls public profile pages straight from the index. You can run it as often as you like, and it surfaces people LinkedIn’s own search would bury. Open the profiles in tabs and work through them. X-ray is the single best free way around LinkedIn’s result limits for high-demand tech roles.

3. Read engagement signals

People who are quiet on their own profile are often loud in the comments. Engagement is one of the clearest passive signals you get for free.

Find a post from a respected account in your niche (a conference, an open-source maintainer, a well-known engineering team) and open the reactions and comments. The people who liked a deep post on distributed systems or commented with a sharp follow-up are showing you their actual interests. That is intent data that no filter gives you. Build a short list from a handful of relevant posts each week.

4. Use second-degree warm paths

A first-degree connection is a colleague. A second-degree connection is one introduction away. That single hop changes your response rate completely.

When you open a promising profile, LinkedIn shows shared connections. A message that opens with “We both know Sanne from your time at Lumera” gets read where a cold InMail gets ignored. On a free account your connection request is the outreach, so keep it to one specific line about why you are reaching out, not a copy-paste pitch.

5. Mine alumni and skills filters

Two filters survive on free and Premium accounts and punch above their weight.

• The school’s alumni view. Open a relevant university or bootcamp page, click “Alumni,” and filter by where they work now and what they do. It is a clean way to find people with a known training background.
• Skills on the profile. When a profile lists skills, they tell you what the person actually does day to day, even when the rest of the profile is thin. Pair a skills read with the current title to confirm a match.

For a wider set of no-Recruiter tactics, see our guide on finding candidates on LinkedIn without Recruiter.

The bare-profile problem

Here is where passive sourcing actually breaks down. The strongest passive people, the ones with nothing to prove and no reason to job hunt, write the least. Their profile is a title and an employer. No summary, no description, no bullet points under each role.

So you are left with “Senior Engineer at Lumera Labs” and a company you have never heard of. Is Lumera Labs a 12-person seed startup or a 2,000-person scale-up? B2B or B2C? Do they run the stack you need? You cannot tell from the profile, and you are not going to Google all 240 companies that show up in a single search. So you fall back on the logos you recognise, and you skip the strong passive candidate at the unknown employer. Every recruiter working the same search makes the same skip, which is exactly why those people stay un-contacted.

How SourceLens reads the bare profile for you

SourceLens is a Chrome extension that fills the gap inline, on the profile, while you source. It reads the candidate’s last 8 employers and analyses each one on the signals that decide fit: company size, funding stage, industry, B2B vs B2C, growth phase, tech stack, and region, and shows that context next to the profile.

So even when the description is empty, you still get the answer that matters: this person spent four years at a Series B fintech of about 300 people and two years at an early-stage B2B SaaS shop. That is enough to judge fit and decide who to message. It runs in SAFE MODE (only profile URLs are processed, no scraping) and it works on every LinkedIn tier, including Basic. The point is simple: you stop skipping passive candidates just because you did not recognise their employer.

Put it together this week

Pick one role you are working on now. Write a tight boolean string, run it both in the LinkedIn search bar and as a Google X-ray. Pull a few names from the comments under a relevant post, check second-degree paths before you reach out, and judge the bare profiles on employer context, not on how much they bothered to write.

When you are ready to stop losing strong passive people to unfamiliar logos, join the SourceLens waitlist and you will be first in when sign-ups reopen.