Director of Services
IOActive
Director of Services
IOActive
Penetration testing and attacker-perspective security
"Making the world a safer and more secure place."
It’s our mission, plain and simple. It drives everything we do – from research to client work to community involvement. And it unifies our global team into an elite force with integrity, fierce passion, and relentless creativity that doesn’t just “push the envelope” or “think outside the box.” We shred the envelope, crush the box, and we have fun doing it. We are always looking for people who share our mission to join us.
About IOActive:
IOActive, a trusted partner for Global 1000 enterprises, provides research-fueled security services across all industries. Our cutting-edge cybersecurity teams provide highly specialized technical and programmatic services including full-stack penetration testing, program efficacy assessments, and hardware hacking. IOActive brings a unique attacker’s perspective to every engagement to maximize cybersecurity investments and improve the security posture and operational resiliency of our clients. Founded in 1998, IOActive is headquartered in Seattle with global operations, including state of the art hardware hacking labs in Seattle, WA, Madrid, Spain and Cheltenham, UK.
The Director of Services is a management role in IOActive's Professional Services Delivery organization. The Director leads a team of consultants delivering offensive security engagements, partners with the Senior Director and Sales on scoping engagements and account growth, and contributes to IOActive's broader services practice.
The role is designed for an experienced security practitioner who is comfortable managing a team, ensuring delivery quality, and partnering with sales as well as other functions within an organization. The role reports to the Senior Director of Services and is positioned as a clear growth path: successful Directors at IOActive typically expand their team and account scope over time and move into Senior Director positions as the regional business portfolio grows.
The successful candidate brings strong technical judgment and applies it through partnership with subject-matter experts, team development, delivery oversight, and client partnership.
This role will be focused on clients and engagements located in the western region of the US. You MUST be located in this region to qualify for consideration.
•Work with sales, consultants, PM, and SMEs within the company to plan and scope prospective engagements
•Provide active oversight on engagements led by your team, including scoping review, technical approach validation, and quality assurance before client deliverables are released
•Serve as the senior escalation point for your team on technically or commercially complex engagement situations
•Join client meetings in a leadership and escalation capacity
•Support proven project methodologies and heuristics to promote efficient and effective engagement flow
•Ensure methodology consistency and IOActive quality standards across your team's engagements
•Provide technical judgment and direction when your team needs senior perspective on engagement decisions
•Surface delivery patterns and operational themes to the Senior Director for regional or global improvement
•Lead, manage, and develop a team of consultants spanning security professional service lines
•Conduct performance reviews, career development conversations, and compensation recommendations using IOActive's competency framework and review process
•Coach team members through technical challenges, client situations, and career transitions
•Build a team culture grounded in IOActive's values: technical excellence, client impact, ownership, cultural intelligence, and bias to action
•Identify high-potential consultants and create development paths that prepare them for senior IC and management roles
•Manage resource allocation, project staffing, and consultant utilization across your team
•Partner with the Senior Director on engagement profitability, scheduling, and pipeline coverage
•Oversee time and expense practices, project status reporting, and operational hygiene for your team's engagements
•Partner with Sales and the Senior Director on new business and strategic accounts assigned to your team
•Maintain working-level client relationships, particularly with Director, Security Architect, Engineering Lead, and Head of Product Security contacts
•Translate technical findings into clear business risk language for client leadership
•Support proposal, SOW, and RFP development with delivery credibility and accurate scoping
•Contribute to global methodologies, report and proposal templates, and intellectual property that improve delivery quality across IOActive
•Support business development efforts where your technical expertise and account relationships are needed
•Build a personal profile through conference talks, published content, or community participation as opportunities arise
•Support team members in developing their own market profiles and technical reputations
•6+ years in security professional services, including substantial hands-on delivery experience earlier in your career
•3–4 years in a management role[AM1] (formal management experience preferred; demonstrated leadership of project teams or working groups also considered)
•Strong technical background across at least two service lines, with the ability to provide credible technical guidance and quality oversight even where you are not the deepest specialist on the team
•Track record of building and developing consultants; visible record of mentoring others and supporting their growth
•Experience supporting business development through technical credibility and account partnership — you have helped Sales win or shape deals through your expertise and relationships
•Strong client-facing presence at Director and Security Architect levels; comfortable in technical and commercial conversations
•Ability to provide technical oversight and quality judgment without personally delivering engagements
•Effective collaboration with Sales, Recruiting, Senior Director, and cross-functional partners
•Comfortable having direct performance conversations, including difficult ones, and managing through change
•Strong written communication skills; willingness to develop public-speaking and external-presence skills over time
•Bachelor's degree in Computer Engineering, Computer Science, analogous technical discipline, or equivalent experience
•Relevant industry certifications (CISSP, OSCP, GPEN, GXPN, or equivalent offensive security credentials) strongly preferred
•Willingness to travel approximately 30% across the Western US region
What We Offer
🎯A chance to work with an industry leader in cyber security
💡Access to world-class technical teams and research
🏆A high-energy, collaborative team that values innovation
💻Flexibility—work remotely or from the office as needed
✈️Opportunities for travel
💰Competitive compensation and performance-based incentives
If this sounds like your kind of challenge, we’d love to hear from you. Let’s talk!
WhyIOActive:
We have over 25 years of experience that’s established and stable; yet high-growth with the energy, passion and dynamic work environment of a startup. We are renowned for our innovation and thought leadership within our high-profile, cutting edge space.We're one of “the good guys” doing crazy cool stuff to thwart bad guys in a critically important business, social and political arena. Our work is great fun with great importance. Above all else, we value our people and our customers. Relationships matter.
IOActive is an equal opportunity employer that is committed to diversity and inclusion in the workplace. We prohibit discrimination and harassment of any kind based on race, color, sex, religion, sexual orientation, national origin, disability, genetic information, pregnancy, or any other protected characteristic as outlined by federal, state, or local laws.
This policy applies to all employment practices within our organization, including hiring, recruiting, promotion, termination, layoff, recall, leave of absence, compensation, benefits, training, and apprenticeship. IOActive makes hiring decisions based solely on qualifications, merit, and business needs at the time.
[]
IOActive provides security services to large enterprises across industries. It uses research-driven methods to perform deep security work such as full-stack penetration testing, program efficacy assessments, and hardware hacking, bringing an attacker’s perspective to help clients strengthen their security posture and business resiliency. Its offerings are delivered as specialized technical and programmatic services aimed at maximizing the value of security investments. The company differentiates itself with its 100% service satisfaction guarantee, a long track record, and recognition in the security industry, serving many Global 500 organizations including power, retail, financial, healthcare, and technology sectors. The overall goal is to help clients reduce risk and improve resilience through hands-on testing, audits, and strategic security assessments.
Explore more opportunities at IOActive