Cybersecurity Incident Response Counsel

Orrick, Herrington & Sutcliffe LLP; Washington (District of Columbia); On-site; USD 120,000 - 180,000; Full time

Job summary

Orrick, Herrington & Sutcliffe LLP's Cybersecurity & Incident Response group seeks a Project Attorney to work hands-on from detection through resolution, advising clients across technology, finance, life sciences and energy sectors. The role combines incident response operations with legal considerations, including breach notification analyses, regulatory reporting, and communications with stakeholders.

1–3 years in cybersecurity incident response or related privacy/data security work is

Qualifications

• 1–3 years in cybersecurity incident response, privacy law, data security, or related area.
• Superior written and verbal communication skills for presenting complex ideas to diverse audiences.
• Willingness to travel as necessary.

Responsibilities

• Triages and coordinates incident response across legal, technical, and business stakeholders.
• Analyzes breach notification laws and advises on obligations.
• Directs forensic investigations, regulatory reporting, and litigation-hold management.
• Drafts incident-related communications and client advisories.
• Supports practice operations, workflow development, and AI-enabled processes.

Skills

Incident response

Data breach response

Regulatory familiarity

Communication skills

Education

Juris Doctor (J.D.)

Job description

Orrick, Herrington & Sutcliffe LLP's Cybersecurity & Incident Response group seeks a Project Attorney to work hands-on from detection through resolution, advising clients across technology, finance, life sciences and energy sectors. The role combines incident response operations with legal considerations, including breach notification analyses, regulatory reporting, and communications with stakeholders.

1–3 years in cybersecurity incident response or related privacy/data security work is