Cybersecurity & Incident Response Managing Associate

Orrick Herrington & Sutcliffe LLP•Washington, DC

About The Position

Orrick is seeking a highly motivated Managing Associate to join its fast-growing, internationally recognized Cybersecurity & Incident Response practice, part of the Cyber, Privacy & Data Innovation team. The role involves advising clients from emerging companies to global enterprises in the technology, finance, life sciences, and energy sectors. The Managing Associate will take a leadership role in incident response and cybersecurity counseling, including transactions, governance, incident preparedness, forensic investigations, regulatory analysis, client communications, and data impact assessments. The position offers hands-on training, mentorship, and direct client exposure, with opportunities to support related privacy and cybersecurity litigation and enforcement, as well as privacy and AI advisory work.

Requirements

Four to six years of cybersecurity/privacy experience in a technology-focused practice; direct incident response experience is strongly preferred.
Strong academic credentials.
Excellent legal research, writing, and analytical skills.
Clear and effective written and verbal communication abilities.
Sound judgment and attention to detail.
Ability to work under time pressure, particularly during incident response matters.
Team-first mindset and ability to collaborate across disciplines.
Membership in the State Bar of the office where the candidate wishes to be based, or ability to become admitted promptly.

Nice To Haves

Direct incident response experience.

Responsibilities

Help clients prepare strategically for and mitigate the risk of security incidents.
Advise clients on cybersecurity laws and regulations.
Advise on security aspects of strategic corporate transactions.
Advise security teams on legal issues involving offensive security and darkweb intelligence gathering.
Direct forensic investigations.
Manage regulatory and litigation risk.
Develop communications strategies to mitigate legal and brand risk.
Support clients with cybersecurity readiness, governance, and risk mitigation.
Lead aspects of incident response and cybersecurity counseling, including transactions, governance, incident preparedness, forensic investigations, regulatory analysis, client communications, and data impact assessments.
Support privacy and cybersecurity litigation and enforcement, and privacy and AI advisory work.

Benefits

Annual discretionary merit bonus based on Firm and individual performance.
Medical, dental, vision, and life benefits.
Mental well-being programs.
Child, family, elder, and pet care benefits.
Short- and long-term disability.
Parental leave benefits.
Health savings account contributions, where applicable under the medical plan.
Flexible spending accounts.
401(k) program.
Flexible Time Off program.
Paid holidays.
Training and mentoring programs, retreats and academies, and shadowing opportunities.