RMFInsider

Negotiating a cybersecurity salary offer comes down to four moves: never name a number first, anchor with a researched range that is specific to the role and the clearance level, ask for the increase in a single calm sentence with a reason attached, and be willing to trade base for other things (signing bonus, cert reimbursement, remote days, an early review) when the base is truly capped. Entry-level candidates have less leverage than they fear, and cleared candidates have more leverage than they use. The scripts below cover both, plus the contractor rate math that explains why a defense contractor can sometimes move $10,000 on a number that looks fixed.

Everything here is what I have seen work from both sides: as a candidate negotiating my own contractor offers, and as an ISSO sitting in on hiring conversations where the recruiter walked back to us with a counter. Numbers are approximate and dated to 2026, and none of them are guarantees.

The rules before the scripts

• Do not name a number first. If forced, name a range whose bottom is the number you actually want.
• Negotiate after the written offer, not during the screen. Before the offer you are a cost; after the offer you are the person they already chose and do not want to re-interview for.
• Ask once, clearly, with a reason. One well-supported counter beats three rounds of haggling. The reason can be market data, a competing offer, a cert, or a clearance.
• Everything in writing. A verbal “we can revisit at six months” evaporates the moment the hiring manager changes jobs.
• Be pleasant and be slow. Ask for 24 to 48 hours to review any offer. I have never seen an offer rescinded because a candidate asked for a day to read it.

Step 1: Know the number before they ask

The single biggest negotiating mistake I see from entry-level candidates is walking in with no number. Then the recruiter asks “what are your salary expectations” in the first ten minutes, the candidate panics and says “$60,000,” and the ceiling for the entire conversation is set at $60,000 plus whatever the recruiter feels like adding.

Build your range from three sources: the posting itself (a growing number of states require ranges, and the top of the posted range is usually real), comparable postings at competitors in the same metro, and a role-specific breakdown like the one I put together for ISSO salary across DoD, GS, and contractor rates. For a cleared entry-level ISSO or analyst seat in 2026, something in the neighborhood of roughly $85,000 to $110,000 is defensible depending on metro and clearance level. For an uncleared junior SOC or GRC analyst, roughly $65,000 to $85,000. Adjust for your market; Hawaii and the DC area are not Ohio.

Step 2: Deflecting the expectations question (scripts)

When the recruiter asks for a number in the screen, the goal is to get them to name the range first.

Script: the polite deflection

“I would rather make sure the role is a fit before we lock in numbers. Can you share the budgeted range for this position? That way I can tell you right now whether we are in the same neighborhood and not waste anyone’s time.”

Script: when they insist

“Based on what I am seeing for similar roles in this area, and factoring in my Security+ and my clearance status, I am targeting the range of $90,000 to $100,000. Where does that land relative to your budget?”

Reason, range, question back. The bottom of your range is your real target.

Script: when the application form demands a single number

Enter the top of your target range, or if the field accepts text, “negotiable based on total compensation.” A form number is rarely binding, and I have never seen an offer rescinded because the form said $95,000 and the candidate later accepted $92,000 with a signing bonus.

Step 3: Countering the written offer (scripts)

You have the offer. It is $82,000. Your research says $90,000 is defensible. Here is the entire counter, and it should be one email or one two-minute phone call, not a campaign.

Script: the standard counter

“Thank you, I am excited about this role and the team. I want to be upfront that I would like to accept, and I am hoping we can get the base closer to $90,000. That reflects the comparable ranges I am seeing for this role in the area, and the fact that I am bringing Security+ and can start immediately. If we can get there, I am ready to sign this week.”

Every clause is doing work: enthusiasm (they relax), a specific number (not “more”), a reason (market plus your qualifications), and a close (sign this week).

Script: when base is capped

“I understand the base is fixed at this level. Could we look at a signing bonus of $5,000 to close part of the gap, and reimbursement for one certification exam in my first year? I would also like a performance review at six months with the opportunity for a salary adjustment, and I would appreciate that in the offer letter.”

Signing bonuses come from a different budget line than base, which is why a recruiter who “cannot move base” can often find $3,000 to $7,000. Cert reimbursement is nearly free for them and worth $439 to $749 to you. The six-month review in writing is the one people forget and the one that matters most a year later.

Script: with a competing offer

“I want to be transparent: I have another offer at $94,000. This role is my first choice because of the mission and the team, and if you can match or come close, I will accept today and withdraw from the other process.”

Only say this if it is true. Recruiters in the cleared world talk to each other more than you would expect, and the community is small enough that a bluff can follow you.

The contractor rate math (why $10,000 is sometimes free)

This is the part nobody explains to entry-level cleared candidates, and it is where the leverage hides. When a defense contractor bids a labor category to the government, they bid a fully burdened hourly rate. Your salary is a fraction of that rate; the rest is fringe, overhead, G&A, and fee. As a rough illustration only, a contract that pays roughly $110 an hour for a “Cybersecurity Analyst II” seat supports a salary somewhere around $85,000 to $100,000 once you strip out the burden. The company has a target margin, not a fixed salary, and the difference between paying you $85,000 and $92,000 is a few points of margin on one seat, which a program manager can approve in an afternoon if the seat has been empty for three months.

And here is the thing: the seat has often been empty for three months. Cleared roles sit open because the clearance requirement thins the pool. That vacancy is your leverage. You do not need to say “I know your wrap rate.” You need to say “I can start Monday” to a program manager who has been explaining to a government customer why the seat is still unfilled.

A related quirk: if the recruiter says “this position tops out at $88,000,” ask “is there a higher labor category on the contract that my qualifications could support?” Sometimes there is.

Clearance leverage (and how to use it without being obnoxious)

If you hold an active clearance, especially TS or TS/SCI, you are a scarce asset and should negotiate like one, calmly. If you have an interim or are clearable but not yet cleared, you have less leverage but not zero, because your sponsorship costs the company time and they want you to stay after they pay for it. The clearance timeline breakdown explains why that investment makes employers sticky.

Script: active clearance

“I want to flag that I hold an active Secret with a recent investigation date, so there is no sponsorship delay or cost on your side. Given that, and the comparable cleared ranges in this market, I am looking for $98,000.”

Script: clearable, not yet cleared

“I understand the offer reflects that I still need to go through the clearance process, and I am glad to. What I would ask is that the offer letter include an adjustment to, say, $96,000 once the clearance is adjudicated, so we both have a clear number tied to that milestone.”

That second script turns the clearance into a built-in raise rather than a discount you eat forever. I have watched people skip this and spend two years at their uncleared entry salary while holding a Secret that would have moved them $12,000 elsewhere.

What not to say

• “I need more because of my rent / student loans / cost of living.” Your expenses are not their problem and they cannot enter them in the justification form. Use market and qualifications.
• “What is the most you can offer?” Invites the lowest defensible answer.
• “I will take anything to get my foot in the door.” You may feel that way. Do not say it. It costs you the counter and sometimes the respect of the hiring manager.
• “My friend makes $120,000 doing this.” Anecdotes are not data, and your friend has five years in.
• Ultimatums you will not follow through on. “I need $100,000 or I walk” only works if you will actually walk.
• Negotiating after you have already accepted. Once you say yes, the conversation is closed. Do the negotiating first.

Entry-level specifics: what you can realistically move

Be honest with yourself about your position. A first-job candidate with Security+ and no clearance can typically move a base offer by roughly 3 to 8 percent, or get a signing bonus and a cert reimbursement instead. That is not nothing: 5 percent on $75,000 is $3,750 a year, compounded across every future raise that is calculated as a percentage of base. The bigger win at entry level is often structural: a written six-month review, a title one notch higher (Analyst II instead of Analyst I, which changes your next negotiation), or a commitment to sponsor your clearance in the first 90 days. Which of those is worth most depends on where you want to be in three years, and the ISSO, ISSM, and ISSE comparison is a useful map of what the next rungs pay.

For cleared candidates and anyone with two-plus years, the range is wider, and the promotion math I laid out in the ISSO to ISSM GS-14 breakdown applies just as much to contractor negotiations: the jump between labor categories is where the real money is, and you negotiate your way into the higher category by naming it.

Practice it out loud

Every script above comes out as a stammer the first time you say it to a recruiter. Read them aloud, and have a friend play the recruiter who says “that is really the top of our range” until the capped-base script comes out level. The ISSO interview questions post has the technical side of the conversation; this one is the money side, and the money side deserves at least as much rehearsal. If you want to run your actual offer and counter past someone who works inside cleared programs and knows how the rates are built, that is exactly the kind of session I do in coaching.