Your number
$1,800
Your rate card
- Day rate$1,850 per day
- Hourlyfor anything that does not fit a day$225 per hour
- A security assessment$12,000 per project
- Monthly retainer$9,600 per month
What to charge for each thing (4)
- Penetration test$15,000 each
- SOC 2 or compliance prep$9,500 each
- Incident response$300 per hour
- Security training session$2,000 each
US rates for cybersecurity consultants at your level, adjusted for your market. What you last got wins.
For 8 hours at $225, the quote is $1,800.
To take home $85,000 after $9,000 of costs and 30% tax you need to bill $134,286 a year. At 24 billable hours a week for 47 weeks that is $125 an hour, $950 a day. Anything under that is a pay cut you did not agree to.
Cybersecurity consultants at your level day at about $1,850 ($1,200 to $2,500 in New York and LA). Your income math lands under that, so the market number is the one to quote; the gap is a raise you are owed.
A security assessment runs $4,000 to $20,000 and takes about 40 hours of your time; at your hourly that is $9,000. The number is the higher of the two, because the client is buying the outcome, not the hours.
A retainer is the month, not the hours: a set scope, paid up front on the 1st. It is priced about 20% under the same work bought one at a time, in exchange for the certainty; three months minimum, or it is not a retainer.