Ask HN: How was your experience hiring a white hat hacker?

How did you find them? Was it worthwhile? Any recommendations for a company paranoid about IT security and considering hiring one?