Cybersecurity & Incident Response Managing Associate

Orrick Herrington & Sutcliffe LLP•Washington, DC

13d•Hybrid

About The Position

Orrick is seeking a highly motivated Managing Associate to join our fast-growing and internationally recognized Cybersecurity & Incident Response practice. This is an opportunity to develop deep expertise in one of the most dynamic areas of law while working closely with seasoned practitioners on high-profile matters. Our team provides strategic legal counsel in response to cybersecurity incidents of every scale—including some of the largest and most complex events in history. We sit within Orrick’s Cyber, Privacy & Data Innovation team and collaborate across practice groups, industries, and client teams. The successful candidate will work with clients ranging from emerging companies to global enterprises across the technology, finance, life sciences and energy sectors. As a Managing Associate on the team, you take a leadership role all aspects of incident response and cybersecurity counseling, including transactions, governance, incident preparedness, forensic investigations, regulatory analysis, client communications, and data impact assessments. You will receive hands-on training and mentorship and will have direct client exposure as you grow into the role. A Managing Associate will also have the opportunity to support cybersecurity-adjacent practices, including privacy and cybersecurity litigation and enforcement, as well as privacy and AI advisory work. The ideal candidate is a proactive, curious, and collaborative team member who is eager to learn and develop a career in cybersecurity and incident response.

Requirements

Three to five years of cybersecurity/privacy experience in a technology-focused practice, with a strong preference for direct incident response experience.
Strong academic credentials
Excellent legal research, writing, and analytical skills
Clear and effective communication abilities, both written and verbal
Sound judgment, attention to detail, and ability to work under time pressure, particularly during incident response matters
A team-first mindset and the ability to collaborate across disciplines
Membership in the State Bar of the office where you wish to be based (or ability to become admitted promptly).

Nice To Haves

direct incident response experience

Responsibilities

Helping clients strategically prepare for and mitigate the risk of security incidents
Advising clients regarding the ever-evolving landscape of cybersecurity laws and regulations
Advising on the security aspects of strategic corporate transactions
Advising security teams on the nascent legal landscape of offensive security and darkweb intelligence gathering
Directing forensic investigations
Managing regulatory and litigation risk
Developing communications strategies to mitigate legal and brand risk
Supporting clients with cybersecurity readiness, governance, and risk mitigation