Managing Consultant

Who you are:

The Managing Consultant (MC) is a hybrid role within IOActive’s Services organization, formalized to make more efficient use of IOActive’s resources and better serve our clients. The MC has part of the responsibilities traditionally held by Directors, Project Managers, and Security Consultants — without changing the underlying accountability model: the assigned Director remains responsible for project delivery, Security Consultants remain responsible for technical execution, and the Project Manager (where assigned) remains responsible for managing the project.

MCs play a critical role across technical knowledge management, sales support, project management, hands-on consulting, and team management, and act as a force multiplier for Directors driving business growth. The role serves two primary purposes: leading technical conversations with clients during the planning phase to ensure engagements are properly scoped and assisting Directors and Business Development Managers (BDMs) during the sales process to help design feasible, accurate proposals. MCs may also serve as a line manager for assigned Security Consultants.

This is an earlier-career-stage counterpart to the Director of Services role: the MC applies the same client-facing judgment, technical credibility, and delivery oversight, at a scope suited to a consultant building toward people leadership rather than a fully management-focused position.

What you'll do:

Sales Support and Technical Scoping

• Lead technical scoping and requirements-gathering conversations with clients during the planning phase, ensuring proposals reflect client needs and consultants receive the technical detail required for execution.
• Facilitate the Project Profitability Model (PPM) process to establish clear project objectives, technical requirements, and level of effort.
• Assist in drafting sections of Statements of Work (SoW), including scope of services, deliverables, and respective responsibilities.
• Participate in client discussions and meetings alongside the BDM to help build a tailored, well-scoped proposal.

Technical Project Leadership and Delivery

• Coordinate with the Project Manager to establish an action plan enumerating project tasks and ownership; assume technical coordination while logistics remain with the PM.
• Execute or oversee technical project-management tasks, including access requests, credentials management, asset deployment, and sensor whitelisting.
• Proactively identify and troubleshoot technical issues that arise during project execution, such as device malfunctions, access restrictions, etc.
• Serve as a client point of contact for escalating critical or urgent findings and coordinating required testing notifications.
• In the absence of an assigned Project Manager, assume PM duties to ensure timely delivery, including client follow-up, timesheet review, and project close-out.
• Provide technical review and approval of reports prior to client delivery, in partnership with the assigned Director.

Consulting and Subject Matter Expertise

• Serve as a subject matter expert on specific projects, clients, or technical fields where background and expertise warrant direct involvement.
• Lead the delivery of final reports, synthesizing complex technical findings into clear, actionable recommendations for clients.
• Collaborate with cross-functional teams to develop innovative solutions and drive continuous improvement in service delivery.
• Maintain billable utilization at or below 25% when staffed as a regular consultant, preserving capacity for scoping, sales support, and team-management duties.

Team Leadership and Development

• Serve as line manager for assigned Security Consultants, including leading weekly check-ins and monthly one-on-one meetings.
• Mentor and guide consultants to support their professional development and job satisfaction.
• Proactively address challenges or concerns raised by consultants, providing support and guidance.
• Solicit consultant feedback on project experiences to inform annual performance reviews.

Director Support and Business Growth

• Strengthen client relationships and contribute to business growth by enforcing best practices, ensuring exceptional service delivery, and identifying opportunities for client expansion.
• Act as the main point of contact for assigned clients, with the Director available as an escalation contact.
• Collaborate with Directors on strategic initiatives and projects that support broader business objectives.
• Help Directors stay focused on strategy and growth by absorbing day-to-day scoping, delivery-support, and consultant-management responsibilities.

What you bring:

Experience and Background

• 4+ years in offensive security services, with substantial hands-on delivery experience across client engagements.
• Prior experience leading technical scoping, project coordination, or informal team leadership; formal people-management experience is a plus but not required.
• Strong technical background in at least one offensive security service line (application security, red team, mobile security, security architecture, ICS/OT/SCADA, SDL, or related disciplines), with working familiarity across others.
• Demonstrated ability to translate technical findings into client-ready recommendations and to support proposal and SoW development.
• Experience supporting or participating in the sales process, including scoping calls and level-of-effort estimation, preferred.

Capabilities

• Strong client-facing communication skills; comfortable leading technical conversations with client stakeholders during scoping and delivery.
• Ability to balance hands-on consulting work (up to 25% billable) with scoping, sales support, and team-management responsibilities.
• Effective cross-functional collaborator with Directors, Project Managers, BDMs, and Security Consultants.
• Sound judgment in escalating critical findings and managing client-facing risk conversations.
• Comfortable mentoring and providing feedback to consultants, including through structured one-on-ones and performance reviews.
• Excellent written and verbal communication; able to distill complex security concepts for both technical and non-technical audiences.

Credentials

• Bachelor’s degree in Computer Engineering, Computer Science, or equivalent professional experience.
• Industry certifications preferred: OSCP, GPEN, GXPN, CISSP, CISA, CISM, or equivalent offensive security credentials.
• Willingness to travel approximately 25% for client engagements.

What Success Looks Like

• Client engagements you scope and support are accurately estimated and set up for on-time, on-budget delivery.
• Projects under your technical leadership meet IOActive’s methodology and quality standards, with strong client satisfaction.
• Consultants you line-manage are engaged, developing their skills, and supported through regular one-on-ones and mentoring.
• Directors and BDMs rely on your technical input to build accurate, winnable proposals.
• Assigned clients view you as a trusted, responsive point of contact.
• You are visibly building toward Director-level scope through expanded account ownership, technical leadership, and people-management experience.

Core Competencies

• Problem Solving: Identifies and resolves complex challenges with sound judgment and creative thinking; works effectively in collaborative problem-solving situations.
• Communication: Strong interpersonal, verbal, and written skills; listens actively, clarifies when needed, and communicates with clarity and confidence at all levels.
• Teamwork and Collaboration: Builds positive team environments; exhibits objectivity, openness, and generosity in sharing knowledge and expertise with colleagues.
• Ethics and Integrity: Treats all people with respect; honors commitments; models honesty and integrity in every professional interaction.
• Judgment: Exercises sound judgment; involves the right stakeholders in decisions; balances speed with rigor.
• Planning and Prioritization: Uses time and resources efficiently; plans and organizes effectively; consistently delivers on commitments.
• Professionalism: Holds self and others to high standards; accepts accountability; represents IOActive with distinction in every client and colleague interaction.
• Quality and Continuous Improvement: Actively seeks ways to raise the standard of work; applies feedback to improve personal and team performance.
• Initiative and Ownership: Proactively identifies and pursues opportunities; takes responsibility without being asked; inspires the same in others.
• Adaptability: Navigates ambiguity and change with composure; thrives in a dynamic, fast-moving environment.

What We Offer 

🎯 A chance to work with an industry leader in cyber security

💡 Access to world-class technical teams and research

🏆 A high-energy, collaborative team that values innovation

💻 Flexibility—work remotely or from the office as needed

✈️ Opportunities for travel

💰 Competitive compensation base range of $100,000 - $185,000, depending on background and location.

If this sounds like your kind of challenge, we’d love to hear from you. Let’s talk!

Why IOActive:

We have over 25 years of experience that’s established and stable; yet high-growth with the energy, passion and dynamic work environment of a startup. We are renowned for our innovation and thought leadership within our high-profile, cutting edge space. We're one of “the good guys” doing crazy cool stuff to thwart bad guys in a critically important business, social and political arena. Our work is great fun with great importance. Above all else, we value our people and our customers. Relationships matter.

IOActive is an equal opportunity employer that is committed to diversity and inclusion in the workplace. We prohibit discrimination and harassment of any kind based on race, color, sex, religion, sexual orientation, national origin, disability, genetic information, pregnancy, or any other protected characteristic as outlined by federal, state, or local laws.

This policy applies to all employment practices within our organization, including hiring, recruiting, promotion, termination, layoff, recall, leave of absence, compensation, benefits, training, and apprenticeship. IOActive makes hiring decisions based solely on qualifications, merit, and business needs at the time.