Most of the time spent on this goes into the wrong step. People hunt for an email before they are sure whose email they need, then write to a recruiter, a department head two levels up, or someone who left the company in the spring. Settle the name first, and the address usually takes ten minutes.
The order below is the one that wastes the least time: identify the person, find a published address, fall back to the company’s email format, verify, then write. Each step has a point where you should stop and use a different channel instead, and those are marked.
Who is the hiring manager for a job you found?
The person the role would report to, who owns the headcount and makes the final call. That is usually not the recruiter, and at a large company it is rarely anyone with “VP” in the title.
Greenhouse, one of the common hiring systems, describes the role this way: “Generally, the hiring manager acts as the subject-matter expert (SME) for the role.” In its setup, the hiring manager writes the role-specific parts of the interview, such as a take-home exercise or a code review, and is “responsible for reviewing applications in the hiring manager review stage.” So this is the person who reads your application closely, after a recruiter’s first screen.
Clues to who it is, in the order to check them:
- The job post itself. Many posts say “reports to the Head of Data” or “you’ll join Maria’s team”. That line is the answer.
- The team named in the post. “Payments Platform” or “Growth Marketing” tells you which team lead to look for.
- Seniority. For an individual contributor role, the hiring manager is usually a team lead or engineering manager. For a team lead role, it is the director above them.
- Company size. Below a few dozen staff, it is often a founder. In a 2018 YC blog post, Harj Taggar advised companies under 20 people that a founder should take the first call with every engineering candidate, so at that size a founder is usually in the hiring loop from the start.
How do you find the hiring manager on LinkedIn?
LinkedIn is the fastest place to get the name, and the weakest place to get the address. Use it for the first and take the name elsewhere for the second.
Three routes, from most to least direct:
- The “Meet the hiring team” section. Some job posts list the people behind them. According to LinkedIn’s help page on social hiring, anyone who opens such a job sees the people listed under that heading, the poster included, and can send each of them a connection request or a message. If the hiring manager is listed, you have the name and a sanctioned way to message them. LinkedIn’s help pages also describe a Message button in that section on the job description page.
- The #hiring frame. A manager who adds a job to their profile gets a #hiring frame on their photo, which is a public signal that they want to hear from candidates for that role.
- A people search. On the company’s LinkedIn page, filter employees by the team or title from step 1 above, for example “engineering manager” plus “payments”. Cross-check that the person is current: the dates on their profile and recent activity tell you.
If LinkedIn’s own search is thin, Google can search LinkedIn for you. Google’s help page on refining searches explains the site: operator (“Enter site: in front of a site or domain”) and quotes for exact phrases, so a query like site:linkedin.com/in "engineering manager" "Acme" payments often surfaces the right profile.
What LinkedIn won’t usually give you is the email. LinkedIn’s help center explains that a member’s main email shows only to first-degree connections unless they change the default. Unless the manager has accepted your connection, the contact info panel will be empty for you.
Where might a hiring manager have published an email?
In places they wrote or spoke in public. An address someone put out themselves beats a constructed one: it is live, and they have already agreed to receive mail at it.
Check these, and stop at the first hit:
- Talks and podcasts. Conference speaker pages and podcast show notes often list a contact address for the speaker.
- Blog bylines. Engineering and product blogs sometimes end posts with “questions? write to me at”.
- The company’s press or partnerships pages, if the manager owns a function that deals with outsiders.
- GitHub. An engineering manager who commits in public may show a work address on commits, unless they use a no-reply address.
- Their own site or newsletter. Many managers keep one, and the about page usually has a way to reach them.
If a recruiter’s name is on the job post and their address is published, that is useful too, both as a contact and as a sample of the company’s email format.
How do you work out a company’s email format?
From any real address the company has made public. Companies apply one format to everyone, so a single published address for anyone there tells you the shape of the hiring manager’s.
| Signal | Where to look | What it tells you | Trust it? |
|---|---|---|---|
| A named employee’s published address | Press releases, blog posts, speaker pages | The exact format, such as jane.doe@ | High, if it is recent |
| A recruiter’s address on a job post | The post, or the confirmation email after you apply | The format and the mail domain | High |
| Addresses an email-finder tool has seen | Hunter’s Domain Search and similar tools | The most common format, with sources | Medium; check the dates on its sources |
| Role addresses (careers@, press@) | Contact and careers pages | The mail domain, not the personal format | Only for the domain |
| Nothing found | n/a | Fall back to first.last@ or first@ | Low until verified |
Hunter says every address in its Domain Search is “returned with public sources on the web, along with their discovery dates”, which lets you judge whether a format is current. Pay attention to the domain as well as the format. A company with a .io website may receive mail at a .com, and a multinational may use a different domain per country, so take the domain from a real address, not from the website.
Large companies add one wrinkle: two employees with the same name. If the format is first.last@ and the manager has a common name, expect a number or a middle initial, and treat the plain version as a guess.
How do you check a hiring manager’s address before you send?
Run it through an email verifier, which asks the company’s mail server whether the address exists without sending anything. Then send to one candidate, not every variant at once.
Hunter’s verifier page lays out its steps: it confirms the domain has mail servers, then runs an SMTP check that asks the server about that one mailbox, with no message sent. It also tests for accept-all domains, also called catch-all, where the server says yes to any name at all. On such a domain the check cannot tell a real mailbox from an invented one, so a guess passes whether it is right or wrong. Hunter says it has its own method for confirming accept-all addresses with several major providers; other verifiers simply label them risky.
When a verifier returns “accept-all” or “risky”:
- Prefer the format you saw on a real address over the generic first.last@.
- Send to one address and wait a day for a bounce before trying another.
- Keep a note of where each address came from, so a bounce points you to the next option.
What if you can’t find any email at all?
Switch channels instead of guessing harder. Past three unverified guesses, your time is better spent on a different route to the same person.
- A LinkedIn connection note. On a free account, LinkedIn’s help center allows a personal note on just three invitations a month, capped at 200 characters each, so save them for the people who matter most.
- The hiring team message button, if the manager is listed on the job post.
- The recruiter. A recruiter’s address is easier to find, and a short note asking them to pass your application to the hiring manager is a legitimate request.
- A referral. Someone you know at the company can forward your note internally, which beats a cold address.
For the general approach to writing when the person is senior, should you email the CEO for a job covers when to aim for the CEO and when to stay with the person the role reports to.
At a startup, isn’t the hiring manager just the founder?
Usually, until the team reaches a few dozen people. At a seed-stage company there is no separate hiring manager: the CEO or CTO owns the role, reads the applications and runs the first call. So the search becomes “how do I find a founder’s address”, which is a slightly different problem.
For the manual version of that search, from the YC directory to commit history, read how to find a startup founder’s email.
If you would rather not run it for every company, Backdoor does the lookup as part of its outreach. Its daily sweep covers new YC companies, Product Hunt, TechCrunch, Crunchbase, Wellfound, GitHub, funding announcements and careers pages, and it keeps the startups that fit what you have done. For each one, it works out the founder’s address on its own and prepares a draft explaining your fit, and that draft goes nowhere until you reply SEND. Approved mail leaves from your Gmail, a quiet founder gets at most three nudges in that same thread, and you get a text the moment one answers. Discovery and research are free, and outreach is the paid part.
Know its boundary before you rely on it. Backdoor’s pages talk about founders as the recipients; none of the pages we read describe writing to recruiters or to team leads at larger companies. For those, the manual route on this page is the one to use.
What should you say once you have the address?
Three or four sentences: the role and that you applied, one result that fits what the team does, and a small ask. A hiring manager reads it as a colleague would, so write it like one.
Subject: Applied for Senior Data Engineer, Payments Platform
Hi [Maria],
I applied this morning for the [Senior Data Engineer] role on your team. I noticed the post mentions [moving reconciliation from nightly batches to streaming]; at [my current company] I [led that migration for our ledger, which cut reconciliation lag from 14 hours to under 5 minutes].
If it’s useful, I’d be glad to walk through how we did it. 15 minutes any day next week?
[Arjun] [LinkedIn URL]
What makes it work: the subject says exactly what it is, so it doesn’t read as spam; the opening ties you to a line in their own post; and the ask offers something useful rather than asking for a favour. If you haven’t applied yet, apply first. Many hiring managers will send you back to the posting anyway, and a note that follows an application gives them a record to find. For templates aimed at founders rather than managers, see cold email to a startup founder.
Is it okay to email a hiring manager directly?
Yes, if you keep to a work address, send one specific note, and follow up sparingly. A short, relevant email about a role they are trying to fill is something most managers can act on.
Where it goes wrong:
- Personal contact details. A personal Gmail from an old project, or a phone number from a data broker, crosses a line. Stick to work email and LinkedIn.
- Copying the whole team. Write to one person. If it is the wrong one, they will tell you who is right.
- Following up too much. One or two follow-ups in the same thread, a week apart, is enough. Follow-up tools can keep the dates for you.
- Asking them to skip the process. Ask for a conversation, not for your application to bypass the recruiter.
- Writing before you are a fit. If you miss the must-haves on the post, the note costs you goodwill you might want later.
One hiring manager in forty minutes: a worked lookup
0:00. The post for a product designer role says “reports to the Design Lead, Checkout”. No name.
0:05. The LinkedIn post has no hiring team section. A people search on the company page for “design lead” plus “checkout” returns one current employee, Tomás Reyes, with a #hiring frame.
0:15. His LinkedIn contact info is hidden. A design conference page lists him as a speaker but gives no address.
0:22. The company’s newsroom has a press release signed by a communications manager: first.last@ on the .com domain, while the website is on .io.
0:28. You build tomas.reyes@ on the .com. The verifier returns “accept-all”, so it can’t confirm the person.
0:35. You apply through the posting, then send the note to that one address and log “format from press release, accept-all”.
0:40. Done. If it bounces, the fallback is a 200-character LinkedIn note.
The timings are illustrative; give yourself a limit per company, such as 30 minutes, and switch to LinkedIn or a recruiter when you hit it. If your applications have gone quiet across the board, start with the five-point audit in applied to 200 jobs and no response.
How we chose
We compare tools on what their own public pages say, checked on the dates shown, and label every claim. How we compare tools.
FAQ
How to find hiring manager email
First identify the person: the job post, LinkedIn's "Meet the hiring team" section and the company's team page usually point to whoever the role reports to. Then look for an address they have published, and if there is none, build one from the company's email format, which you can infer from any address the company has made public. Run the result through an email verifier before you send, and send to one candidate at a time.
How to find hiring manager email on LinkedIn
LinkedIn rarely shows the email itself: its help page says your primary email is visible only to your direct connections by default. What LinkedIn does give you is the name, through the hiring team section on the job post, the poster's #hiring frame, or a search of the company's people by title. Take that name off LinkedIn and work out the address from the company's email format, or connect first and check their contact info.
How to find hiring manager contact information
Start with what they chose to publish: a personal site, a conference talk page, a blog post byline or a GitHub profile. If nothing is public, use the company's email format with their name and verify it, or message them on LinkedIn with a connection note. Avoid personal phone numbers and personal email addresses, even if you can find them; a work address is the polite and effective channel.
I applied for a job and want to email the hiring manager but I don't know who it is
Look at the title the role would report to, which job posts often state, then search the company's LinkedIn people for that title on the same team. Check the job post for a hiring team section, and whether the poster has a #hiring frame. If the company is a young startup with no managers yet, a founder is probably the one hiring, and Backdoor can find that founder's email and draft the note for you to approve.
Sources checked
Show 10 sources
- Hiring team role: Hiring manager | Greenhouse Support, checked
- Jobs through social hiring | LinkedIn Help, checked
- Send an enhanced message to recruiters using Writing Assistant | LinkedIn Help, checked
- Manage who can see your email address on LinkedIn | LinkedIn Help, checked
- Personalize invitations to connect | LinkedIn Help, checked
- Refine Google searches | Google Search Help, checked
- Email Verifier: Free email checker to avoid risky email addresses (Hunter), checked
- Domain Search: Find email addresses from any company (Hunter), checked
- Convincing Engineers to Join Your Team | Y Combinator, checked
- Backdoor: AI job agent that emails startup founders for you, checked