1099 Cybersecurity Analyst Jobs in Boulder, CO

What Boulder looks like for information security analysts

430 people work as information security analysts in Boulder, CO. That figure counts every employment arrangement, W-2 and 1099 alike — BLS does not split the two. Applying 1099WORK's estimate that roughly 25% of information security analysts work on a 1099 basis puts the independent share near 108 people. Treat that as an order of magnitude, not a census. By headcount the market ranks 57th of the 244 metro areas where BLS publishes a figure for this occupation.

Concentration is the more interesting number. The location quotient is 1.87, meaning information security analysts make up a share of local employment 87% larger than they do nationally. Demand here is structural, not incidental. Per head of population it ranks 7th of 244 — a genuine cluster rather than a by-product of metro size. The metro's population is 330,000, roughly flat since 2020.

Specialised markets are harder to enter and more durable once you are in: the buyers know what they are looking at, and price on capability rather than on rate alone. The pay premium over the national figure also gives a contractor room to price above a national rate card.

What information security analysts earn in Boulder

The median cybersecurity analyst in Boulder earns $156,410 a year. That works out to $75.20 an hour at a standard 2,080-hour year. That is 25.2% above the national median of $124,910.

The spread matters more than the midpoint for anyone working 1099. The gap between the 10th and 90th percentile is $121,710, which is the range your negotiating position, client mix and specialisation actually move you across. Top-decile earners clear $218,180, against $96,470 at the bottom decile. These are W-2 and 1099 earnings combined, before any contractor adjusts for self-employment tax and unfunded benefits — which is what the next section is for.

Local, state and national side by side

Boulder pays 19.8% above the Colorado median. Against the national median of $124,910 it sits 25.2% above. The location quotient column is the one worth reading twice: it measures how concentrated the occupation is relative to the national average, and it moves independently of pay.

What to charge as a 1099 cybersecurity analyst

A 1099 contract that pays the same headline number as a W-2 job is a pay cut. You pick up the employer's half of payroll tax, you stop being paid for holidays and time off, and health cover and retirement come out of your own revenue. Matching a $156,410 salary in Boulder therefore takes about $208,627 in contractor gross — a multiplier of 1.33×.

Spread across a full 2,080-hour year that is $100.30 an hour. Nobody bills 2,080 hours: at a more realistic 80% utilisation, with the rest going to admin, invoicing and finding the next contract, the number you should quote is closer to $125.38.

The 1.33× multiplier assumes:

• 7.07% for the employer half of FICA, which self-employment tax shifts onto you
• 20 unpaid days a year — roughly ten holidays plus two weeks off
• 15% for health coverage and retirement you now fund yourself
• excludes business insurance, mileage, accounting fees and unbilled time

A rate card for Boulder

The percentile spread above is more useful as a rate card than as a statistic. Each row below takes a point in the local wage distribution and applies the same 1.33× contractor multiplier, then divides across a realistic 80% billable year. Treat the middle row as your default and the bottom row as a floor you do not go under — not as a starting offer.

Nearby markets for information security analysts

Contractors are not bound by a metro line the way a commuting employee is, and the neighbouring markets often price the same work differently. Within reach of Boulder:

What you owe in Boulder

Nothing is withheld from a 1099 payment. You pay self-employment tax at 15.3% on 92.35% of net profit, plus income tax, in four estimated payments a year. At the Boulder median that is roughly $5,525 a quarter in self-employment tax alone, before income tax. Colorado adds its own income tax and its own estimated-payment schedule on top.

Is this really 1099 work?

Labelling an engagement 1099 does not make it 1099 — the IRS weighs who controls the work, who supplies the tools and who carries the risk. For information security analysts the usual flashpoints are set schedules, employer-supplied equipment and exclusivity clauses. Colorado also applies its own test, which can reach a different answer than the IRS does on identical facts.

Getting in front of the buyers

1099WORK is a marketplace built for 1099 engagements specifically: companies post a defined scope, information security analysts keep one verified profile, and agreements, onboarding and payment happen in the same place. It launched as 1099REPS for independent medical sales reps and now covers the wider 1099 economy, Boulder included.