Cybersecurity Incident Response Lead — Managing Associate

Orrick Herrington & Suttcliffe; Boston (MA); On-site; USD 260,000 - 365,000; Full time

Job summary

Orrick Herrington & Suttcliffe is seeking a Managing Associate to join our Cybersecurity & Incident Response practice. You will lead incident response engagements, advise on evolving cybersecurity laws, and mentor junior lawyers while collaborating with multidisciplinary teams on high-profile matters.

The role includes governance, forensic investigations, regulatory analysis, client communications, and data‑impact assessments across technology, finance, life sciences, and energy sectors.

Qualifications

• Three to five years of cybersecurity/privacy experience in a technology-focused practice, ideally with direct incident response experience.
• Strong academic credentials
• Excellent legal research, writing, and analytical skills
• Clear and effective written and verbal communication
• Sound judgment, attention to detail, and ability to work under time pressure during incident response
• Team-first mindset and cross-disciplinary collaboration
• Bar membership in the state where based or ability to obtain promptly

Responsibilities

• Help clients prepare for and mitigate cybersecurity incident risk
• Advise on evolving cybersecurity laws and regulations
• Advise on security aspects of strategic transactions
• Advise on the legal landscape of offensive security and darkweb intelligence gathering
• Direct forensic investigations
• Manage regulatory and litigation risk
• Develop communications strategies to mitigate legal and brand risk
• Support cybersecurity readiness, governance, and risk mitigation

Skills

Cybersecurity

Legal research

Written communication

Verbal communication

Attention to detail

Team collaboration

Bar admission

Education

Juris Doctor (JD) or equivalent

Job description

Orrick Herrington & Suttcliffe is seeking a Managing Associate to join our Cybersecurity & Incident Response practice. You will lead incident response engagements, advise on evolving cybersecurity laws, and mentor junior lawyers while collaborating with multidisciplinary teams on high-profile matters.

The role includes governance, forensic investigations, regulatory analysis, client communications, and data‑impact assessments across technology, finance, life sciences, and energy sectors.