Size managed security services — IAM, SIEM, encryption, application security

For security solutioning teams who need sizing ratios and project timelines a buyer’s security team will accept.

Engagement type: Solo Pod
Experts: 1 lead · 1 consulted
Hours: ~35
Duration: 2 weeks

What the client needed

A firm needed the current shape of cybersecurity services: the offerings that form a standard catalogue, the prevailing sizing ratios — tickets managed per FTE — for IAM, SIEM and managed encryption, and the typical timeline and FTEs for SAST, DAST and MAST programmes on extra-large applications.

The experts engaged

Previously at Accenture, Cognizant, Wipro, HCL Technologies · 22 years

Roles heldpre-sales solutions architect, cybersecurity services · principal architect, cybersecurity services · lead consultant, cloud services

Ten years solutioning and delivering cybersecurity services across North America, Europe and the Middle East
Security solutions lead for medium and large enterprise customers
RFQ response and solution design on AWS and Azure

Atlas Verified · Tier B

Previously at KPMG, IQVIA, Bharti Airtel, Deloitte · 12 years

Roles heldprogramme manager, cybersecurity services · information-security manager · risk-management lead

Client solutioning for security governance, risk management, access and application-security controls
Audit frameworks, privacy and information-security policies

Atlas Verified · Tier C

A exceptional · B strong · C competent — the tier is derived from the whole assessment, not a single score. The transcript and report are open to you before you engage. How verification works →

The brief

The questions on the table

As the client wrote them, lightly shortened. Client and respondents are not named.

Q1
What offerings form a standard cybersecurity services catalogue?
Q2
What are the prevailing tickets-per-FTE ratios for IAM, SIEM and managed encryption?
Q3
What timeline and FTEs do SAST, DAST and MAST programmes take on extra-large applications?

The hours

What the work involved

01
Catalogue
The standard offerings by domain — identity, detection and response, data protection, application security, cloud security — with scope boundaries.
02
Sizing ratios
Tickets or events per FTE for IAM, SIEM and managed encryption, as ranges, with the automation level and tooling assumed, from estates the expert had solutioned.
03
Application-security programmes
Timeline and team for SAST, DAST and MAST on extra-large applications, with the drivers — code base size, languages, release cadence.
04
Cross-check and session
A cybersecurity programme manager from a Big Four practice checked the ratios; one session with the client.

Deliverables

What the client received

Service catalogueWith scope boundaries.
Sizing ratiosIAM, SIEM, managed encryption.
Application-security programme estimatesTimeline and FTEs by test type.
One sessionWith notes.

The terms

What an engagement like this costs

You buy hours in blocks and can change the expert at the end of any block, at no extra cost. Longer projects run in stages: pause after a block, pick up the next stage when you are ready.

Pricing in full →

Rate band: $65–$250 /hr; Senior specialists can be up to $500
Hour blocks: 1 · 2 · 5 · 10 · 20 · 50 · custom
This engagement: Solo Pod · ~35 hours · 2 weeks

Sizing a security services bid?

Describe what you need

For example: “We need tickets-per-FTE ratios for IAM and SIEM and a timeline for SAST/DAST on a 5-million-line estate.”

We aim to come back with matched experts within 24 to 72 hours.