Apologies, there are currently no jobs matching your search criteria.
Umbrella Company Calculations for Application Security
Around 80% of application security contracts with a stated status are inside IR35. The shift toward embedding security within development teams, DevSecOps models, threat modelling as part of the SDLC, and ongoing code review, means most application security contractors operate as permanent members of engineering functions. Financial services and government, where application security is driven by regulatory requirements, are the largest sources. Rates are strong, reflecting the shortage of contractors who combine development skills with security expertise.
For an Inside IR35 application security contract, the agency or client normally pays assignment income to an umbrella company. The umbrella first accounts for employment costs funded from the assignment rate, which can include employer National Insurance, the apprenticeship levy, the umbrella margin and employer pension costs where applicable. The balance becomes gross taxable pay before Income Tax, employee National Insurance and other payroll deductions.
On current Inside IR35 application security listings, advertised day rates cluster near £750 per day, with a typical band between £550 and £950 before umbrella employment costs are deducted. Treat advertised rates as assignment income, not net pay.
A compliant umbrella should provide a Key Information Document and payslip that separate assignment rate, employment costs, gross pay and deductions. See HMRC guidance on off-payroll working at https://www.gov.uk/guidance/understanding-off-payroll-working-ir35.
Required Day-Rate Uplifts
An Inside IR35 rate cannot be compared directly with an independent limited-company rate because umbrella assignment income funds employment costs before PAYE is calculated. To estimate parity, model the outside arrangement using the same working days and pension assumptions, then increase the umbrella day rate until projected net pay matches the target for application security work.
For illustration, applying a 20% uplift to a £750 day rate produces an umbrella assignment rate of £900 per day for application security work. That percentage is a starting scenario, not a guaranteed parity figure. The required uplift can change with working days, tax code, student loans, pension contributions, umbrella margin, holiday-pay method, expenses and other income. Compare like-for-like annual figures and obtain a written reconciliation before accepting a rate.
Broader application security contract listings on Quality Contracts span roughly £550 to £950 per day across IR35 statuses; inside IR35 quotes often sit toward the upper end once employment costs are included.
Check holiday-pay treatment separately from net pay. Use the Inside IR35 umbrella calculator on Quality Contracts to stress-test scenarios.
- Mid-level contractor £550–£750 / day
- Senior contractor £750–£950 / day
- Interim / executive £950–£1,093 / day
PAYE Tax Bracket Impacts
Inside IR35 application security earnings paid through an umbrella are employment income. As annual taxable pay rises, portions of income can enter higher PAYE bands, while employee National Insurance and other payroll deductions continue under their own rules. High earners may also be affected by the tapering of the personal allowance, which can create a higher effective marginal deduction rate across the taper range.
Tax bands and rates depend on the tax year and, for Income Tax, where the contractor is resident in the UK. Bonuses, overlapping contracts, benefits, student loans and income from other sources can also change the result. These examples are educational only and are not tax or financial advice. Contractors should use current HMRC thresholds and seek qualified advice for their circumstances.
At higher Inside IR35 application security assignment rates, such as levels approaching £950 per day, more annual income can fall into higher Income Tax bands after employer costs are deducted. Personal allowance tapering can also raise the effective marginal deduction rate for some high earners within the taper range.
Over the past twelve months we tracked more than 150 application security contract roles on Quality Contracts. Data reviewed up to October 2026.
