The "employ a hacker to catch a hacker" methodology of hiring is fine, if your hacker is going to catch other hackers. If you're actually just hiring thieves to

The "employ a hacker to catch a hacker" methodology of hiring is fine, if your hacker is going to catch other hackers. If you're actually just hiring thieves to help themselves to all they can carry in their pockets, then their expertise really isn't relevant beyond their own self-serving exploitation of that knowledge domain.