Cybersecurity Incident Response Attorney (1–3 yrs) — Remote

Orrick, Herrington & Sutcliffe LLP; Northern (KY); Hybrid; USD 150,000 - 200,000; Full time

Job summary

Orrick is seeking a Cybersecurity Project Attorney to join our Analytics team in the United States. The role focuses on the operational and legal mechanics of incident response, offering hands-on training and client exposure as you grow.

1–3 years of experience in cybersecurity incident response or privacy law is ideal, with opportunities to advise on governance, regulatory issues, and AI-related initiatives.

Qualifications

• Juris Doctorate (J.D.) from an accredited university and admission to practice in good standing in a US jurisdiction.
• 1–3 years of experience in cybersecurity incident response, privacy law, data security, or a related area of practice.
• Superior written and verbal communication skills for diverse audiences.
• Ability to solve practical problems with limited standardization and/or direction.
• Familiarity with breach notification laws and regulatory frameworks.
• Experience with incident response workflows and forensic coordination.
• Willingness to travel as necessary.

Responsibilities

• Triaging and coordinating the response to security incidents across legal, technical, and business stakeholders
• Analyzing breach notification laws and advising on notification obligations and timelines
• Advising on the security aspects of strategic corporate transactions
• Directing forensic investigations and liaising with forensic vendors
• Drafting and reviewing incident-related communications, including notification letters and public statements
• Conducting data impact assessments and supporting clients with post-incident remediation and governance
• Embedded in live incident response engagements from the outset with hands-on training and client exposure
• Support privacy and AI advisory work across practices as opportunities arise

Skills

Incident response experience

Privacy law knowledge

Regulatory compliance

Client communication

Legal research and writing

Cross-functional collaboration

Education

Juris Doctorate (J.D.)

Job description

Orrick is seeking a Cybersecurity Project Attorney to join our Analytics team in the United States. The role focuses on the operational and legal mechanics of incident response, offering hands-on training and client exposure as you grow.

1–3 years of experience in cybersecurity incident response or privacy law is ideal, with opportunities to advise on governance, regulatory issues, and AI-related initiatives.