Cybersecurity & Incident Response Managing Associate

Orrick, Herrington & Sutcliffe LLP; Washington (District of Columbia); On-site; USD 120,000 - 160,000; Full time

Job summary

Orrick, Herrington & Sutcliffe LLP is seeking a leader in incident response within its Cybersecurity & Incident Response practice. The role focuses on guiding clients through cyber incidents, governance, and strategic risk management, spanning transactions, preparedness, and investigations.

You will coordinate forensic analyses, regulatory analyses, and communications strategies to mitigate legal and brand risk, serving clients from startups to global enterprises across tech, finance, life

Job description

Overview

• The Cybersecurity & Incident Response practice advises on cybersecurity incidents of every scale, including some of the largest and most complex events globally.
• The role involves taking a leadership position in incident response and cybersecurity counseling, covering transactions, governance, incident preparedness, forensic investigations, regulatory analysis, client communications, and data impact assessments.
• Responsibilities include helping clients strategically prepare for and mitigate security incident risks, advising on cybersecurity laws and regulations, and advising on the security aspects of strategic corporate transactions.
• The role also encompasses advising security teams on the nascent legal landscape of offensive security and darkweb intelligence gathering, directing forensic investigations, managing regulatory and litigation risk, and developing communications strategies to mitigate legal and brand risk.
• Clients span emerging companies to global enterprises across technology, finance, life sciences, and energy sectors.
• Managing Associates have the opportunity to support cybersecurity-adjacent practices, including privacy and cybersecurity litigation and enforcement, as well as privacy and AI advisory work.
• The ideal candidate will have direct incident response experience within a technology-focused cybersecurity/privacy practice.