All posts

Building a Cold Email List From Hiring Signals: Job Posts to Verified Contacts

··6 min read

A job post is a public sign that a company has a problem and a budget for it right now. If your product supports or speeds up the team that is hiring, the person who will manage that hire has a reason to read your email this month. To build the list: watch for posts in the roles your product serves, find the hiring manager rather than the recruiter, work out the company's address pattern, generate and verify the candidates, and email within days to a couple of weeks of the post. The list will be smaller than a bulk export, and much more timely.

This post is about the list-building side. For the email itself, see how to write a cold email, and for the wider process, our cold email guide.

Which hiring signals matter

Start from what your product does, then map it to the roles a company would hire to solve the same problem without you.

If you sell... Watch for posts like... Email
Sales tooling or lead data SDR, BDR, Sales Development Manager Head of Sales, VP Sales
Email deliverability or list hygiene Email Marketing Manager, Lifecycle Manager, RevOps Head of Marketing, RevOps lead
Bookkeeping or finance software Accountant, Bookkeeper, Finance Manager Founder, CFO, Head of Finance
Recruiting software Recruiter, Talent Acquisition Head of People, Talent lead
IT or security services IT Manager, Security Engineer CTO, Head of IT
Agency services (content, ads) Content Marketer, Paid Media Manager Head of Marketing, Founder

Some signals are stronger than others:

  • First hire in a function. A company's first RevOps or first email marketer means the problem is new and nobody owns the tooling yet.
  • Several open roles in one team. A team scaling fast needs tools to keep up.
  • Re-posted roles. A post that keeps reappearing can mean the role is hard to fill, so an alternative may be welcome.
  • Senior hire. A new head of a function often reviews the tools in their first months. That is a separate trigger worth watching for a few weeks later.

Where to find the posts

Company careers pages, job boards and professional networks all carry them. Some data vendors sell hiring signals as a filter. Whichever you use, respect each site's terms of use, and record where and when you saw each post. The date matters because the signal fades.

For each post, capture:

Field Why
Company name and website To find the domain and email pattern
Role title Your reason for writing
Location and team To find the right manager
Post date To prioritise and to stop chasing stale signals
Post URL So you can check it is still open before you send

Find the hiring manager, not the recruiter

The post often names a recruiter or a generic careers@ address. Those are for applicants. Your buyer is the person the new hire will work for.

  1. Read the post. "Reporting to the Head of Growth" tells you who to look for.
  2. Look on the company's team or about page and on professional profiles for the person in that role.
  3. At small companies, it is often the founder.
  4. At larger companies, go one level up from the role, not to the top. A VP of Sales hiring five SDRs is the buyer; the CEO is not.

Avoid role addresses like careers@ and jobs@ for outreach. They go to recruiting inboxes and your pitch will be ignored or reported. The free role-based email filter catches them in a list.

Get the address

Hiring-signal lists are usually built by hand or with light automation, so you often have a name and a company but no address.

  1. Find the domain. Use the company website. If you only have a name, the free company name to domain tool suggests one.
  2. Work out the pattern. The free email format finder suggests a company's most likely format. Our guide to email address patterns lists the common ones.
  3. Generate candidates for the person with the email permutator, or the bulk email permutator for a whole list.
  4. Verify every candidate. Keep the one that comes back valid. If more than one comes back valid, see which address to use when a lead has several.
  5. Catch-all domains accept every address, so none of the candidates can be confirmed. Pick the one in the company's known pattern and treat it as unconfirmed. See what is a catch-all domain.

Guessed addresses that are not verified are one of the fastest routes to a bounce spike. A list of 200 hand-built leads with no verification can easily bounce more than a bought list.

Prioritise by freshness

Post age Priority
Under 1 week Highest. Email now
1-3 weeks Good. Email this week
3-6 weeks Check the post is still open first
Older or closed Drop the hiring angle; treat as an ordinary account

Check the post URL before each send batch. Mentioning a role that has been filled makes the email look automated.

Make the email about the hire

Your reason for writing is the post, so say so plainly and briefly:

  • Name the role, not the post: "Saw you're building out the SDR team."
  • Connect it to a problem the hire will face: ramp time, lead supply, list quality.
  • Offer something small: a short teardown, a benchmark, a template.
  • Do not imply you know more than the post says.

Keep the sequence short. A hiring-signal email is relevant for a few weeks, so two or three steps over ten days is enough. Our cold email templates include trigger-event examples.

Keep the list clean as it grows

Hiring-signal lists are built a few leads at a time, which makes it easy to skip hygiene.

Where SimpleVerifier fits

Hiring-signal lists are full of guessed addresses, and guessing is fine as long as every guess is checked. SimpleVerifier checks each candidate with a live mailbox check and returns valid, risky or invalid with a reason. Catch-alls come back risky and graded, not guessed valid. Paste a few addresses or upload a CSV on the verify page, or check a single address with the free email checker. The first 100 checks are free with a Google sign-in, and Starter is $9 a month for 2,500 checks. See pricing.

Common questions

Are job postings good for finding cold email leads?

They are one of the more reliable B2B signals, because a company only advertises a role when it has a need and a budget for it. If your product helps that team or replaces part of that work, the hiring manager has a reason to listen now.

Who should I email at a company that is hiring?

The person the new hire will report to, or the head of that function. Recruiters and HR handle the hiring process and are rarely the buyer for a product that serves the team.

How do I find the hiring manager's email address?

Identify the person from the job post, the company's team page or a professional profile, find the company's email pattern from other known addresses, generate the likely addresses, and verify them. Keep the one that comes back valid.

How quickly should I contact a company after it posts a job?

Within days to a couple of weeks. Early in the hiring process the problem is fresh and the team is feeling the gap. Once the role is filled, the urgency usually drops.

Check your list before you send

Real mailbox checks over SMTP, and nothing is sent to the address. Sign in with Google and your first 100 email checks are free, no card. Plans for bigger lists are on the pricing page.