The most common job search in software is not the one that follows a layoff. It is the one that never gets announced: a staff engineer with eleven years of tenure, a functioning team, a reasonable manager, and a growing certainty that the next four years will look exactly like the last two. Nothing is wrong enough to quit over. Everything is wrong enough to look.
That search has a constraint the unemployed search does not. You run it from inside the organization you are trying to leave, on a laptop that organization owns, on a calendar your manager can read, with a LinkedIn profile your colleagues follow. And the cost of being caught is asymmetric: at will, in most of the United States, an employer that learns you are interviewing can act on that the same week.
This is a guide to running that search properly — what is genuinely visible to your employer, where senior searches leak in ways that junior searches do not, and how to sequence the process so the first time anyone at your company hears about it is when you resign with a signed offer in hand.
Why Stealth Is the Default Mode in 2026
Two things changed at once. The number of employed engineers quietly looking went up, and the tolerance for being caught went down.
The 2026 market has kept a lot of people looking while employed. Tech employers announced roughly 52,050 job cuts in the first quarter of 2026 alone, the highest Q1 total Challenger, Gray & Christmas has logged since 2023, and total 2026 tech layoffs passed the full-year 2025 figure with four months still on the calendar. Roughly a quarter of March 2026 cuts traced to AI and automation, with the rest attributed to cost discipline and restructuring. Watching two reorgs land on adjacent teams is a powerful motivator to have a search running before you need one.
That timeline is the whole reason stealth matters. A junior candidate can compress a search into three weeks and take PTO. A staff engineer running four processes in parallel is exposed for a full fiscal quarter. Other 2026 time-to-fill data and job-market analysis agree: the more senior the role, the longer the window in which something can slip.
On the risk side, the law is not on your side. Most US employment is at will, which means an employer that discovers you are interviewing can generally terminate you for it. Employment attorneys are consistent on this point: absent a contract or a protected-activity claim, being fired for applying or interviewing elsewhere is lawful, and even in employee-friendly states like California the analysis turns on whether some other unlawful motive was involved. Realistically, most companies do not fire people for interviewing. They do something quieter and just as expensive: you are dropped from the roadmap, passed over at promo, and moved to the top of the next reduction list.
What Your Employer Can Actually See
Start with the uncomfortable baseline. Workplace monitoring is no longer an edge case reserved for call centers.
The capability set is broader than most engineers assume. Modern monitoring stacks cover keystroke logging, periodic or continuous screen capture, application and browsing analytics, email and messaging inspection, location signals, and productivity scoring, as vendors themselves document. In UK survey data cited in 2026 reviews of workplace surveillance, 36% of firms reported reviewing browsing history and 35% reported reading employee email.
The legal picture is worse than the technical picture. The Electronic Communications Privacy Act nominally restricts interception of electronic communications, but it carries two exceptions that swallow the rule for corporate devices: monitoring for a legitimate business purpose, and monitoring with employee consent — consent that is typically granted the day you clicked through the acceptable-use policy, as employment counsel routinely explain. Because an employer-provided computer system is employer property, a company that issues you a laptop generally violates no law by monitoring everything you do on it, work-related or not. The practical rule that employment lawyers give clients is blunt: on a company device you have effectively no reasonable expectation of privacy, and you should assume anything you do on it is visible. A handful of states layer on notice requirements, but notice is not prohibition.
| Surface | Visibility to employer | Stealth rule |
|---|---|---|
| Company laptop / VPN | Full — browsing, files, screenshots | Never touch the search on it |
| Work email account | Full — readable and retained | Personal email for every application |
| Slack / Teams DMs | Exportable by admins | Assume permanent and discoverable |
| Corporate calendar | Often visible to whole org | Private events, generic titles |
| Personal phone on guest wifi | Limited (network metadata) | Use cellular for calls |
| LinkedIn "Open to Work" | Filtered, not guaranteed private | Treat as semi-public |
| Public profile edits | Broadcast to your network | Disable activity notifications first |
There is also a layer most engineers never think about: attrition modeling. Predictive people-analytics tools are sold on the promise of flagging which employees are likely to leave weeks or months before they resign, using inputs including tenure, compensation position, engagement survey responses, internal mobility history, and manager feedback, as vendor documentation lays out. You do not need to leak anything to be scored a flight risk: a long-tenured senior engineer with flat comp, no recent internal move, and a cooling engagement score is the archetype.
The "Open to Work" Trap
The recruiters-only version of LinkedIn's Open to Work signal is the single most misunderstood control in the job search, because people read it as private when the platform itself does not promise that.
LinkedIn's own help documentation is careful: the company takes steps to prevent LinkedIn Recruiter users at your current employer from seeing your career interests, but it cannot guarantee complete privacy. The filter works by matching your listed current employer against registered Recruiter seats, and there are several ordinary ways that match fails: an in-house recruiter using a personal account, a company operating Recruiter licenses under a differently named legal entity, or a third-party agency your company contracts with that is not covered by the block at all. Guides that dig into the setting reach the same conclusion — the recruiters-only toggle is meaningfully safer than the green photo frame, but it is not a privacy guarantee, and your employer can still learn about the search secondhand when someone in their network sees your profile.
The practical guidance for a senior search:
- Turn off profile-change broadcasts before you touch anything. Editing your headline, adding a skill, or updating your summary can push a notification to your entire network, including your manager. Disable activity broadcasts first, then edit.
- Never use the public #OpenToWork photo frame while employed. It is visible to everyone, permanently, and it reads as availability rather than selectivity — the opposite of the posture you want at staff level.
- Keep your listed current employer accurate. The filter that hides you from your own company's recruiters depends on that field. Removing your employer to "hide" is counterproductive: it deletes the only mechanism that filters them out.
- Expect sudden profile polish to be read as a signal. A profile that has sat untouched for three years and then gains a summary, a new headline, and eleven skill endorsements in one week is legible to anyone paying attention.
Interview Copilot lets you run full mock interviews, system design practice, and negotiation rehearsals from your own device — no work laptop, no calendar invites, no trace on your employer's systems.
Generate free practice questionsSix Ways a Senior Search Actually Leaks
In practice, searches rarely get exposed by dramatic surveillance. They get exposed by ordinary carelessness at six specific points.
- The work email address on the application. Applying with a company email address puts the entire thread — recruiter replies, scheduling links, offer discussions — inside a system your employer owns and can read. Career advisors have said this for years: keep every logistic of the search on personal equipment and personal accounts.
- The wardrobe change. Still the most reliable tell in a hybrid office. As one widely read account of blown searches put it, colleagues figure it out when you show up in a suit on a 100-degree day having never worn one before. If your loop is on video, the fix is trivial; if it is onsite, change offsite.
- The calendar. Most corporate calendars default to org-visible. A block titled "Personal appointment" three Tuesdays in a row at 2pm is a pattern. Vary the times, mark events private, and prefer booked annual leave over improvised excuses.
- The improvised cover story. Fabricated emergencies are the worst option available — they invite follow-up questions weeks later and do lasting relationship damage when they unravel. Standard guidance is to use real time off rather than invented crises, and to avoid lying outright. "I have a personal commitment" is complete, true, and unimpeachable.
- The trusted coworker. The colleague you tell in confidence is not malicious; they are human, and they will mention it to exactly one other person. At senior level your search is interesting gossip. Tell nobody inside the company — not your skip, not the manager who says they would "support you either way."
- The reference who is still there. Listing a current-company reference, or an ex-colleague who still talks weekly to your manager, converts a private search into a public one at the worst possible moment.
- Zero company surfaces. Personal device, personal email, cellular data. Assume the work laptop reports everything.
- Recruiters-only, never the green frame. Turn off profile-change broadcasts before editing anything on LinkedIn.
- Tell nobody internally. Not your closest teammate, not the manager who promised support.
- Edges of the day, batched PTO. Real time off beats invented emergencies every time.
- Confidentiality in writing to every recruiter. No contact with anyone at your current employer.
- Check vest and clawback dates before you give notice. Start-date timing is negotiable; forfeited equity is not.
- Decide on the counteroffer before it arrives. It buys months, and it reprices you as a flight risk.
- Workplace Surveillance and Bossware: 2026 Statistics
- AI Employee Monitoring 2026: Why Bossware Hurts Productivity
- Carey & Associates: Surveillance at Work in 2026
- What Is Bossware and How Employee Monitoring Technology Works
- Bossware Laws 2026: Employee Monitoring Legal Rights
- Wyatt, Tarrant & Combs: The ECPA and Remote Work Monitoring
- Venable LLP: The Right and Wrong Ways to Electronically Monitor Employees
- Super Lawyers: Can My Employer Monitor My Emails and Internet Usage?
- Business News Daily: Laws and Ethics of Employment Monitoring
- LinkedIn Help: Let Recruiters Know You're Open to Work
- The Interview Guys: LinkedIn's Hidden Open to Work Settings
- CareerBldr: LinkedIn Open to Work (2026) — Settings and Privacy
- LinkedIn Open to Work: How to Use It Without Alerting Your Boss
- The Balance: When Can You Get Fired for Looking for Another Job?
- Garrison Law: Fired for Applying or Interviewing for a New Job?
- West Coast Employment Lawyers: Fired for Job Searching in California
- Time-to-Hire Benchmarks 2026
- How Long Does It Take to Hire a Senior Software Engineer in 2026?
- KORE1: Time to Fill a Software Engineer Role in 2026
- Software Engineering Job Market 2026: Data, Trends and Outlook
- KORE1: Tech Layoffs 2026 — 52,050 Q1 Cuts
- 2026 Tech Layoffs Already Exceed the 2025 Total
- Crunchbase News: Tech Layoffs Tracker
- Predicting Attrition: How AI Flight Risk Models Work
- Predictive HR Analytics: Ultimate Guide 2026
- Development Guild: Why Backdoor Reference Checks Do More Harm Than Good
- JRG Partners: The Ethics of Back-Channel Referencing
- Zippia: 9 Things to Avoid During Backdoor Reference Checks
- HRD: Are Counteroffers Still Effective in 2026?
- Momentum Search Partners: Surprising Data About Counteroffers
- 7 Counter Offer Statistics Everyone Needs to Know
- Qapita: What Happens to RSUs After Termination of Employment?
- The Pragmatic Engineer: Equity 101 for Software Engineers
- RSU Vesting 2026: Cliff, Graded and Performance-Based
- Salary Negotiation Statistics 2026 — 60 Key Figures
- Forbes: Unemployed Job Seekers Receive Lower Job Offers
- TheLadders: How to Hide Your Job Search From Your Boss
- CBS News: 7 Ways to Hide Your Job Search From the Boss
- Monster: The Right and Wrong Ways to Sneak Out for a Job Interview
- Ask a Manager: How Do You Hide Your Job Hunt When You're Working Full-Time?
- Hays: How to Get Time Off Work for a Job Interview
- How to Interview for a New Job While You're Still Employed
Running the Search on Time That Is Not Theirs
The scheduling problem is the hardest operational constraint in a stealth search, because a senior loop is not one meeting. It is a recruiter screen, a hiring-manager conversation, a technical screen, a four-to-six-hour virtual onsite, and often a follow-up with a director or a bar-raiser.
Three rules make it tractable. First, push everything to the edges of the day. Recruiters and hiring managers routinely accommodate 8am and 5:30pm slots for employed senior candidates, because they are hiring employed senior candidates constantly; scheduling before 9am or after 5pm is standard practice, not a special favor. Ask for it explicitly in your first reply to the recruiter and it will be treated as normal.
Second, batch the expensive blocks. A full virtual onsite deserves a real PTO day, and stacking two companies' onsites into the same week beats burning four separate half-days: fewer absences, tighter offer comparison, cleaner decision window.
Third, protect your baseline. The fastest way to attract scrutiny is a visible drop in output while you are interviewing, and the review from the quarter you spent quietly searching is the one that determines your leverage if the search stalls. (If your performance is already being formally questioned, the calculus changes entirely; see our guide to the 30-day PIP window.)
References and Backchannels Without Blowing Cover
Formal references are the easy part: you supply them, they are typically checked at the end, and you control who is on the list. The dangerous part is the informal one.
Backchannel references — also called backdoor, quiet, or deep references — are checks run without the candidate's permission or knowledge, usually through a hiring manager's own network. They are common at senior levels and in startups, where a founder or director will simply call someone they know who worked with you. Search professionals note that the practice is widespread in executive hiring despite its ethical problems, and the standard warning to employers is that reaching into a candidate's current employer can put that candidate in a genuinely dangerous position. Best practice is explicit: do not contact anyone at the current employer without permission.
You cannot prevent backchannels, but you can shape them. State the confidentiality requirement early and in writing: "This search is confidential. Please do not contact anyone at my current employer, and let me know before you speak with anyone in my network." Then map your own exposure — list everyone at the target company who overlaps with your current one, and reach them first with a friendly note. Keep your reference list composed entirely of people who have already left, and whose discretion you have tested. We go deeper on this in the reference check you never agreed to.
The Endgame: Offer, Notice, and the Counteroffer
Everything above buys you one thing: the ability to choose the moment of disclosure. Spend it deliberately.
Before you resign, check the money that is still on the table. Unvested equity is generally forfeited when you leave regardless of whether you quit or are terminated — only vested shares are yours. Vesting schedules are lumpy and back-loaded by design: the classic structure is a one-year cliff followed by monthly vesting, while some large employers use back-weighted schedules such as 5/15/40/40 across four years. Understanding your cliff and graded vest dates can be worth tens of thousands of dollars for the cost of delaying a start date by three weeks. Check any signing-bonus or relocation clawback windows in the same pass.
Then decide in advance how you will handle the counteroffer, because you will probably get one. In 2026 survey data, 85% of employers said they had extended a counteroffer to an employee with an external offer in the past year, and 32% said the employee left within twelve months anyway. The often-repeated claim that 80% of counteroffer acceptors leave within six months is weakly sourced and worth treating skeptically, but the directional finding is durable across recruiting-industry datasets: retention counteroffers buy months, not years. The deeper problem is that accepting one permanently reprices you as a flight risk inside a company that now knows you looked. Our full analysis lives in the counter-offer trap.
Why Employed Candidates Negotiate Better
The strongest argument for stealth is not defensive. It is that a confidential search conducted from inside a job you can keep produces materially better offers than the same search conducted after you have already left.
That is the entire mechanism. Negotiation leverage is a function of your best alternative, and a job you already hold is a strong one. It lets you take the recruiter's compensation question without flinching, refuse an exploding deadline, and hold a number through two rounds of pushback — behaviors that salary-negotiation research associates with higher final offers. It also makes the most valuable structure available: two live processes finishing in the same two-week window. That mechanic is worked through in our competing offers playbook.
The corollary is a sequencing rule senior engineers violate constantly: do not quit first. Resigning in order to "search properly" converts your best alternative from a paying staff role into unemployment, before a single offer exists.
Practicing in Private
The last operational constraint is preparation. A senior loop demands rehearsal — system design under time pressure, behavioral stories at staff scope, negotiation language you can deliver without hedging — and the traditional ways of getting that rehearsal are exactly the ways searches leak. Mock interviews with coworkers are out. Practice sessions on the work laptop are out.
This is the part of the process AI-based preparation genuinely solves. Practicing on your own device means you can run a full mock loop at 6am without a single artifact appearing on a system your employer controls, and without a third party who now has to keep your secret. You can rehearse the recruiter screen twenty times, drill the system design domain the target company is known for, and run the negotiation conversation until the number comes out flat and unapologetic. For the first conversation in that sequence, our guide to the recruiter screen covers what actually gets evaluated.
Run the search quietly, prepare thoroughly, and disclose exactly once — on the day you resign, with a signed offer already in hand.
Preparing for a search nobody knows about?
Interview Copilot gives you private, AI-powered interview practice, system design coaching, and salary negotiation rehearsal — on your own device, on your own time, with nothing touching your employer's systems.
Create a free account