Five practices
What I actually recruit for.
Five practices, one market, fourteen years. Narrow on purpose: it is the reason the outreach gets read and the reason I can hold a technical conversation without a script.
Cyber Security
Identity & Access Management, Application Security, Product Security, Security Operations, DFIR, GRC, Offensive Security, Cloud Security.
The hardest hires on this list, because the good ones are already somewhere that pays well and they stopped answering recruiters years ago.
Go-To-Market
Sales Engineering, VP & Director of Sales, Professional Services, Marketing leadership. For security and infrastructure vendors from seed to IPO.
Commercial people who can hold a technical conversation. A much smaller pool than either side assumes.
Software Engineering
Backend, platform and product engineers for financial firms and high-growth technology companies.
Usually a speed problem rather than a scarcity problem. The best people are off the market in days.
Infrastructure & Cloud
Cloud architects, platform and site reliability engineers, network and systems specialists.
Titles vary wildly between companies, so screening on the job description alone tends to miss the right people.
Technical Leadership
CISO, VP Security, Head of Identity, Director of Incident Response, Head of Application Security.
Confidential almost every time, on both sides. These searches are run quietly or not at all.