Use contingency search for volume, mid-level, and well-defined roles where speed matters. Use retained search for executive, confidential, or hard-to-fill leadership positions where the cost of a wrong hire is high. A three-line rule covers most decisions:
- Role criticality: If the hire directly shapes business outcomes or team direction, retained is the appropriate model.
- Candidate scarcity: If qualified candidates are rare or passive, retained search reaches them. If the pool is broad and active, contingency is sufficient.
- Confidentiality: If the search must stay undisclosed, retained's exclusive structure protects it. Contingency, by design, involves multiple firms and wider outreach.
AESC defines retained search as an exclusive, senior-led engagement focused on passive candidates and market mapping. National Recruiting Authority benchmarks contingency fees at 15–30% of first-year salary and retained fees at roughly one-third of first-year cash compensation. For IT and cybersecurity searches, Plucktalent applies this same logic: contingency for cloud engineers and analysts, retained for CISO-level and director-and-above placements.
Key Takeaways
Retained search is the lower-risk model for leadership-critical and confidential IT roles; contingency is the faster, lower-cost model for well-defined mid-level and volume hires.
| Point | Details |
|---|---|
| Model selection trigger | Use role criticality, candidate scarcity, and confidentiality to choose between models. |
| Fee benchmarks | Contingency runs 15–30% of first-year salary; retained runs roughly one-third of first-year cash comp. |
| Guarantee terms | Contingency guarantees typically cover 30–90 days; retained guarantees commonly run 90–365 days. |
| Hybrid option | A partial retainer buys exclusivity for director-level searches without full retained cost. |
| Plucktalent's approach | Plucktalent maps each IT and cybersecurity search to contingency, retained, or hybrid before any fee agreement is signed. |
Table of Contents
- What is contingency search and when does it fit?
- What is retained search and when is the investment justified?
- Contingency vs retained at a glance
- How do you decide which model fits your hire?
- What should you expect from each model?
- Which model fits common IT and cybersecurity roles?
- What do fees, guarantees, and ROI look like?
- Plucktalent's perspective on IT and cybersecurity hiring
- The choice is a risk decision, not a cost decision
- Plucktalent supports both models for IT and cybersecurity hiring
- Sources
- FAQ
What is contingency search and when does it fit?
Contingency search operates on a success-fee basis. The recruiter bears all search costs and collects a fee only when a candidate is placed. There is no upfront payment, no exclusivity requirement, and no obligation to use a single firm. Indeed's employer guide describes this as a model where multiple recruiters can work the same role simultaneously, which creates speed but also introduces duplication risk.
The model performs best when the talent pool is broad, role requirements are well-defined, and time-to-fill is the primary concern. Typical use cases include:
- Account executives and sales engineers
- Software engineers below staff or principal level
- Cloud infrastructure and DevOps engineers
- Security analysts and SOC roles
- Recruiters, project managers, and business analysts
Contingency recruiters are incentivized to move fast and present volume. That behavioral dynamic is useful for repeatable, high-supply hires. It becomes a liability for senior or niche roles, where speed and volume can crowd out fit and depth.
Pro Tip: When briefing multiple contingency firms, give each a distinct sourcing lane (one focuses on LinkedIn, another on referral networks, a third on niche job boards) and set a 48-hour window for submitting candidates. This reduces duplicate outreach and keeps the candidate experience consistent.
What is retained search and when is the investment justified?
Retained search is an exclusive engagement. The employer pays a staged fee upfront, and the recruiter commits to completing the search. AESC characterizes it as a senior-led process targeting passive candidates through direct outreach and market mapping, not job board postings. Axe Recruiting frames the distinction plainly: contingency sells resumes; retained sells a process.
Retained search is appropriate when:
- The role is VP-level or above (VP of Engineering, CISO, CTO, Head of Security)
- The search is confidential (replacing an incumbent, restructuring leadership)
- The candidate pool is narrow, passive, or requires security clearance
- A failed hire would carry significant operational or reputational cost
Fee staging typically follows three milestones: an initiation payment upon signing the engagement brief, a delivery payment when the shortlist is presented, and a final payment upon hire. Each payment is non-refundable and signals mutual commitment to the process.
Pro Tip: Before signing a retained engagement, align internal stakeholders on the decision criteria and interview cadence. The hiring manager's role is to respond to shortlists within five business days. Delays on the employer side are the most common reason retained searches extend past their projected timelines.
Contingency vs retained at a glance
EisnerAmper documents that the two models differ across fee structure, exclusivity, candidate reach, and depth of process. The table below maps those dimensions directly.
| Dimension | Contingency | Retained |
|---|---|---|
| Fee structure | within a typical percentage range of first-year salary, paid on placement | approximately one-third of first-year cash compensation, paid in staged milestones |
| Exclusivity | Non-exclusive; multiple firms may work the role | Exclusive; one firm holds the engagement |
| Scope and depth | Active candidate sourcing, job board and network-driven | Market mapping, passive outreach, research-led |
| Candidate volume vs quality | Higher volume, variable fit | Smaller shortlist, higher average fit |
| Timeline | 2–6 weeks for mid-level roles | 8–16 weeks for executive roles |
| Confidentiality | Limited; role is broadly marketed | High; outreach is targeted and discreet |
| Guarantees and replacement | 30–90 day guarantees are common | 90-day guarantees are standard |
The most consequential differences for hiring managers are exclusivity and depth. A contingency firm has no contractual obligation to complete the search. If the role proves difficult, the recruiter moves to easier placements. A retained firm is contractually bound to deliver a shortlist. That accountability changes the recruiter's behavior throughout the process.
How do you decide which model fits your hire?
The decision maps to five variables. Work through them in order:
- Role criticality: Does this hire directly affect revenue, security posture, or organizational direction? If yes, retained.
- Candidate scarcity: Are qualified candidates actively looking, or are they employed and passive? Passive-dominant pools require retained's direct outreach.
- Confidentiality: Is the search sensitive? Retained's exclusive structure limits market exposure.
- Internal bandwidth: Can your team manage multiple recruiter relationships and deduplicate candidates? If not, retained reduces coordination overhead.
- Timeline: Is speed the primary driver? Contingency fills faster for well-defined roles. Retained takes longer but produces a more complete market view.
Questions to ask shortlisted recruiters
Before signing any agreement, ask these directly:
- Where do you source candidates for this role type — job boards, direct outreach, or referral networks?
- What is your exclusivity requirement, and what happens if the search stalls?
- What are the milestone deliverables, and when do I receive a shortlist?
- What is your guarantee period, and does it apply to both resignation and termination?
- Will the partner who sold the engagement lead the actual search, or does it transfer to a junior researcher?
The last question surfaces one of the most common red flags in retained proposals: partner handoffs. A senior partner closes the deal, then hands execution to a junior associate. Demand written confirmation of who leads the search.
Pro Tip: A hybrid or "container" arrangement, where the employer pays a partial retainer (typically one-third of the projected fee) to secure exclusivity and the balance on placement, works well for director-level roles that sit between mid-level and true executive. It gives the recruiter enough commitment to pursue passive candidates without the full retained cost structure.
What should you expect from each model?
Contingency process stages
Brief → rapid sourcing → candidate shortlist → employer interviews → offer and close. Most contingency searches move from brief to first shortlist within one to two weeks. Mid-level IT roles typically fill in 2–6 weeks from brief to accepted offer. Reducing placement time in contingency depends heavily on how quickly the employer responds to submitted profiles.
Retained process stages
Discovery and brief → market mapping → targeted passive outreach → candidate assessment → shortlist presentation → final interviews → decision and offer. Executive searches typically run 8–16 weeks. The market mapping phase alone, where the firm documents the competitive talent landscape, takes two to four weeks and produces intelligence that has value beyond the hire itself.
Deliverables to require in any statement of work
- Market map (competitive landscape and candidate universe)
- Candidate scorecard aligned to the role's success criteria
- Interview guide with structured questions
- Reference check reports (minimum two professional references per finalist)
- Replacement terms in writing, including the trigger conditions
For contingency, at minimum require a written guarantee period and a clear definition of what constitutes a "placement" for fee purposes. For retained, require milestone deliverables tied to each payment stage.
Which model fits common IT and cybersecurity roles?
Role type determines model fit more reliably than seniority alone. Candidate scarcity and confidentiality are the deciding factors.
- Individual contributor (analyst, engineer L1–L3): Contingency. Broad active talent pool; speed and volume are appropriate.
- Senior engineer or staff-level IC: Contingency or hybrid. Pool narrows at staff level; a partial retainer may be warranted for niche stacks.
- Director of Engineering or Security: Hybrid or retained. Confidentiality and passive-candidate access become relevant. Niche cybersecurity roles at this level often require direct outreach.
- VP of Engineering, VP of Security: Retained. Role criticality and candidate passivity both point to retained.
- CISO or CTO: Retained, always. The candidate pool is small, most are employed, and the search is almost always confidential.
- Cleared or niche technical roles (TS/SCI, OT security, ICS): Retained or specialized contingency with a clearance-focused firm. Standard contingency firms lack the network for cleared searches.
For organizations with continuous mid-level hiring needs, a subscription or capacity model frequently outperforms contingency on total cost per hire and predictability. Retained is rarely the right structure for high-volume non-leadership hiring.
What do fees, guarantees, and ROI look like?
National Recruiting Authority benchmarks contingency fees at 15–30% of first-year salary and retained fees at roughly one-third of first-year cash compensation, paid in three staged installments. EisnerAmper recommends retained for business-critical leadership roles where depth and confidentiality matter.
Common guarantee structures:
- Contingency: replacement guarantees typically cover a period of weeks to several months, often triggered by resignation or termination for cause
- Retained: guarantees commonly cover longer periods, often several months to a year; some firms offer a free replacement search within the guarantee window
Simple fee math
For a mid-level cloud engineer at an example base salary, a contingency fee might be around one-fifth of that salary, paid on placement, with a standard guarantee period.
For a CISO at a higher base salary, a retained fee might approximate one-third of total compensation, typically paid in staged installments. The cost of leaving that role vacant for six months, plus the risk of a failed hire, typically exceeds the fee differential between models.
The ROI case for retained is not about the fee. It is about the cost of the alternative. A mis-hire at the CISO level carries costs in severance, lost productivity, security exposure, and a second search. Leonid Group frames this directly: contingency shifts risk to the recruiter and favors speed; retained shares risk with the employer and buys deeper market mapping and accountability.
Plucktalent's perspective on IT and cybersecurity hiring
Plucktalent evaluates each search request against three internal criteria before recommending a model: candidate scarcity in the specific tech stack or clearance level, the confidentiality requirement, and the employer's internal capacity to manage a multi-recruiter process.
For volume cloud engineer and analyst hiring, Plucktalent uses contingency-style placement with structured briefing to reduce duplication. For CISO-level and director-and-above searches in cybersecurity, the recommendation is retained or hybrid, because the passive-candidate pool requires direct outreach and the employer's risk exposure is too high for a success-fee-only arrangement.
Two patterns appear consistently in Plucktalent's IT and cybersecurity work:
- A financial services firm needed a CISO replacement without disclosing the incumbent's departure. A retained engagement with targeted outreach to passive candidates produced a shortlist of four qualified finalists in ten weeks. A contingency approach would have required broad market exposure, which the firm could not accept.
- A SaaS company scaling its cloud infrastructure team needed eight cloud engineers over 90 days. Contingency with three briefed firms, each assigned a distinct sourcing channel, filled all eight roles within the target window.
Pro Tip: When briefing Plucktalent on a new search, provide the compensation range, the two or three non-negotiable technical requirements, and the decision timeline upfront. Searches with complete briefs move to first shortlist significantly faster than those where requirements are clarified iteratively.
Passive candidate access is a core differentiator in retained searches. Plucktalent's 17 years of IT and cybersecurity recruiting means the firm's network includes candidates who are not visible on job boards and who respond to direct outreach from a known source.
The choice is a risk decision, not a cost decision
The conventional framing of contingency vs retained search treats the retainer as a premium you pay for better service. That framing is incomplete. The more accurate frame, as Leonid Group argues, is risk allocation.
Contingency places execution risk on the recruiter. The recruiter absorbs the search cost and bets on placement. That is a rational structure for roles where the talent pool is deep and the employer can afford to wait for the right submission. The problem is that contingency recruiters, working on spec, will deprioritize difficult searches in favor of easier placements. When a search stalls under a contingency model, the employer often does not know it until weeks have passed.
Retained search places commitment risk on the employer. The employer pays before a hire is made. In exchange, the recruiter is contractually obligated to complete the search and deliver a shortlist. That obligation changes the recruiter's behavior in ways that matter for hard-to-fill roles.
The advice most hiring guides miss: when a contingency search has already failed once, switching to retained is almost always more cost-effective than running a second contingency search. The first failure consumed time and market exposure. A retained firm, contractually bound to pursue passive candidates, reaches the part of the market the contingency search did not.
Hybrid arrangements, where a partial retainer buys exclusivity and the balance is paid on placement, are underused. They are the right structure for director-level searches where the employer wants passive-candidate access but is not ready to commit to a full retained fee.
Plucktalent supports both models for IT and cybersecurity hiring
Plucktalent works with employers on both contingency placements and retained searches across IT and cybersecurity, from staff-level engineers to CISO and CTO engagements. For hiring managers evaluating which model fits a current opening, Plucktalent offers a structured briefing process that maps role requirements to the appropriate search model before any fee agreement is signed.
To start a briefing or review Plucktalent's employer services, visit the Plucktalent employer page. Hiring managers can also request a role-mapping consultation to determine whether contingency, retained, or a hybrid arrangement fits their current search.
Sources
- Retained Executive Search vs Contingency Recruiters
- Contingency and Retained Recruiting: Differences and Considerations
- Contingency vs. Retained Recruiting (Indeed employer guide)
- Retained vs Contingent Search Explained | Axe Recruiting
- Contingency vs. Retained Recruiting: Understanding the Models
- Retained vs contingency search: reframing the discussion around risk, not cost
FAQ
What is the main difference between contingency and retained search?
Contingency search is a success-fee model with no upfront cost and no exclusivity; retained search is an exclusive engagement paid in staged milestones before placement. The core difference is accountability: retained firms are contractually obligated to complete the search.
When should a hiring manager use retained search?
Use retained search for VP-level and above roles, confidential replacements, and positions where the candidate pool is primarily passive. The cost of a failed hire at these levels typically exceeds the fee differential between models.
What fee should I expect for each model?
Retained fees commonly run roughly one-third of first-year cash compensation, paid in three staged installments.
What is a hybrid or container search arrangement?
A hybrid arrangement combines a partial upfront retainer, typically one-third of the projected fee, with the balance paid on placement. It is appropriate for director-level searches where passive-candidate access is needed but a full retained commitment is not warranted.
How does Plucktalent determine which model to recommend?
Plucktalent evaluates candidate scarcity in the specific tech stack or clearance level, the confidentiality requirement, and the employer's internal capacity to manage the process before recommending contingency, retained, or a hybrid arrangement.