71–80 of 115 posts
- are you consulting on the side or full time?
- a template proposal / sow or a link to a good starter?
- can you do this remotely? I’m far far away in terms of time zone and want to get in on remote consulting is it an option?
At some point I’m gonna have to ask these questions with my real user account and a link to my resume as I am needing extra dosh now more than my prior comments on here would suggest
Earlier quoted context omitted.
$300/hr for your time is a steal.
Feel free to steal from me. ;-) As a practical matter: If I were a full time consultant I probably would charge more, but I would also be spending some of my time making sure I had a full pipeline of gigs lined up. The fact that my marketing process is about as lean as it gets -- people send me emails from time to time -- means I don't have to cover that sort of overhead.
I don't think most people realize they can hire a putnam winner and world class crypto expert for the price of a staff engineer.
Earlier quoted context omitted.
Feel free to steal from me. ;-) As a practical matter: If I were a full time consultant I probably would charge more, but I would also be spending some of my time making sure I had a full pipeline of gigs lined up. The fact that my marketing process is about as lean as it gets -- people send me emails from time to time -- means I don't have to cover that sort of overhead.
To give a reference point, you get the equivalent of $300/hr starting around L6 at a FAANG: https://www.levels.fyi I don't think most people realize they can hire a putnam winner and world class crypto expert for the price of a staff engineer.
Only once. ;-)
and world class crypto expert
I've made significant contributions to a few areas but I wouldn't call myself a world class crypto expert. For most projects I could name a dozen experts I would consult before myself.
Earlier quoted context omitted.
To give a reference point, you get the equivalent of $300/hr starting around L6 at a FAANG: https://www.levels.fyi I don't think most people realize they can hire a putnam winner and world class crypto expert for the price of a staff engineer.
a Putnam winner Only once. ;-) and world class crypto expert I've made significant contributions to a few areas but I wouldn't call myself a world class crypto expert. For most projects I could name a dozen experts I would consult before myself.
Significant? I'd say tectonic.
The first-ever to find AWS-wide chink in the Amazon armor? https://www.daemonology.net/blog/2008-12-18-AWS-signature-ve...
Demonstrator of OG Spectre exploit before Google Project Zero got on the train a decade later? https://www.daemonology.net/hyperthreading-considered-harmfu...
> ...I wouldn't call myself a world class crypto expert...
Of course not: crypto doesn't mean what you think it does, anymore ;) But hey, some blockchains do use scrypt, so that's there too. https://archive.is/jS7wJ
Earlier quoted context omitted.
> I've never seen a project where the customer knew what they wanted clearly enough to have a SOW with a fixed scope. Not sure if you do this but that's why you really should charge for helping with the requirements gathering and solution design, it's really valuable to pin down what the problem is and know that what you're going to build will fix it properly. It also means you're not in a rush to throw out an estima…
Right, I'll usually do an initial phone consultation for free, but anything more expensive would be billed. The issue is that there is not usually a well-defined problem. There is a general goal that takes some iterations to accomplish, with the customer concocting new features and requirements as development progresses. Of course everyone says to build some padding into the schedule for that, but they think of expan…
Stick to your list, practice establishing boundaries. If you're just working on whatever their whims bring to the table on any given day and can't control the tasks and outcomes to which you've already agreed, you aren't a contractor, you're an employee without benefits.
"Banging out code" is nothing special, yet here they are knocking at your door?
I did backend development (typescript, graphql, prisma) and devops (kubernetes, terraform, gcp, aws) for two years. I started at 40$/h then finished at 75$/h (100$/h for short contracts). I honestly got burned out by context switching (which I needed to do to fill my week). And it was somewhat easy to find contracts at 75$/h (I consider I am senior level) so I would consider either charging more or billing more hours…
Have you done work in Python/Django?
I consult on tax matters and more specifically anything involving tax and technology (former software engineer).
Rate ranges from $250/hr to $500/hr depending on the level of sophistication.
Earlier quoted context omitted.
You could probably charge a good bit more. Our customers are at 14k week rate for good quality pen testing, app sec, device hacking, sec eng, red teams etc. Edit: and I know friends at big firm with crypto services specialty and they charge a looot more. $400-$500/hr. They stay pretty busy.
I'm fairly good at crypto (not as good as Colin of course) but I think that's not of that much help in general security stuff. Pen testing = knowing all the bugs and code smells in the popular Javascript frameworks, 0 days in a zillion libraries like log4j, etc. I'm basically resigned that the modern web is bloaty buggy crap and so I haven't found it worthwhile to get too familiar with its workings. I have gotten som…