Of Counsel - Incident Response Attorney

Stott and May; New York (NY); Hybrid; USD 150,000 - 250,000; Full time

Job summary

A leading national law firm is seeking a Senior Cyber Incident Response Attorney to join its cybersecurity practice. This role involves leading legal strategies in high-stakes incidents, advising on compliance, and mentoring junior attorneys. The position offers hybrid work flexibility with a commitment to professional growth.

Benefits

Competitive compensation

Comprehensive benefits package

Hybrid work flexibility

Supportive and collaborative culture

Professional development opportunities

Qualifications

• 6+ years of legal experience in cybersecurity and data privacy.
• Strong command of global data protection laws.
• Active bar membership in good standing.

Responsibilities

• Lead legal strategy for cybersecurity incident response matters.
• Advise on compliance with privacy laws like HIPAA, CCPA, GDPR.
• Oversee forensic investigations and manage crisis communications.

Skills

Communication

Client Relationship Management

Legal Strategy

Regulatory Compliance

Incident Management

Education

JD from an accredited law school

Job description

Location: Flexible (Remote/Hybrid Options Available)
Experience:6+ Years
Practice Area: Cybersecurity, Data Privacy, Incident Response

A leading national law firm is seeking a Senior Cyber Incident Response Attorney to join its rapidly expanding cybersecurity and privacy practice. This senior-level position is ideal for an attorney with a deep understanding of data breach management, regulatory compliance, and privacy litigation who thrives in high-stakes, fast-paced environments.

Key Responsibilities:

• Lead legal strategy and execution for complex cybersecurity incident response matters.

• Interface directly with client executives, in-house counsel, and technical teams during high-pressure breach events.

• Advise on compliance with state, federal, and international privacy laws, including HIPAA, CCPA, and GDPR.

• Oversee forensic investigations, data breach notification procedures, and e-Discovery processes.

• Draft and review breach notification letters, regulatory responses, and crisis communications.

• Represent clients in regulatory investigations and privacy litigation.

• Provide mentorship and strategic guidance to junior attorneys and support staff.

Qualifications:

• JD from an accredited law school and active bar membership in good standing.

• 6+ years of legal experience with a primary focus on cybersecurity, data privacy, and incident response.

• Strong command of global data protection laws and breach reporting frameworks.

• Exceptional written and verbal communication skills, with experience managing client relationships.

• Demonstrated ability to manage multiple matters under urgent timelines.

Why Join?

• Be part of a nationally recognized cybersecurity and privacy team.

• Opportunity to lead mission-critical client matters and shape legal strategy.

• Competitive compensation and comprehensive benefits package.

• Hybrid work flexibility and a supportive, collaborative culture.

• Strong commitment to professional development and advancement.