Your number
$1,600
Your rate card
- Day rate$1,675 per day
- Hourlyfor anything that does not fit a day$200 per hour
- A security assessment$10,800 per project
- Monthly retainer$8,650 per month
What to charge for each thing (4)
- Penetration test$13,500 each
- SOC 2 or compliance prep$8,550 each
- Incident response$275 per hour
- Security training session$1,800 each
US rates for cybersecurity consultants at your level, adjusted for your market. What you last got wins.
For 8 hours at $200, the quote is $1,600.
To take home $85,000 after $9,000 of costs and 30% tax you need to bill $134,286 a year. At 24 billable hours a week for 47 weeks that is $125 an hour, $950 a day. Anything under that is a pay cut you did not agree to.
Cybersecurity consultants at your level in your market day at about $1,675 ($1,200 to $2,500 in New York and LA). Your income math lands under that, so the market number is the one to quote; the gap is a raise you are owed.
A security assessment runs $4,000 to $20,000 and takes about 40 hours of your time; at your hourly that is $8,000. The number is the higher of the two, because the client is buying the outcome, not the hours.
A retainer is the month, not the hours: a set scope, paid up front on the 1st. It is priced about 20% under the same work bought one at a time, in exchange for the certainty; three months minimum, or it is not a retainer.