Cybersecurity & Incident Response Associate; SF, SE, NY, DC, BN

Responsibilities

Orrick is seeking a highly motivated Associate to join our fast-growing and internationally recognized Cybersecurity & Incident Response practice. This is an opportunity to develop deep expertise in one of the most dynamic areas of law while working closely with seasoned practitioners on high-profile matters.

Our team provides strategic legal counsel in response to cybersecurity incidents of every scale—including some of the largest and most complex events in history. We sit within Orrick’s Cyber, Privacy & Data Innovation team and collaborate across practice groups, industries, and client teams:

• Helping clients strategically prepare for and mitigate the risk of security incidents
• Advising clients regarding the ever‑evolving landscape of cybersecurity laws and regulations
• Advising on the security aspects of strategic corporate transactions
• Advising security teams on the nascent legal landscape of offensive security and darkweb intelligence gathering
• Directing forensic investigations
• Managing regulatory and litigation risk
• Developing communications strategies to mitigate legal and brand risk
• Supporting clients with cybersecurity readiness, governance, and risk mitigation

The successful candidate will work with clients ranging from emerging companies to global enterprises across the technology, finance, life sciences and energy sectors.

As an Associate on the team, you will support all aspects of incident response and cybersecurity counseling, transactions, fact development, regulatory analysis, client communications, data impact assessments, and help to drive key work streams during live incidents. You will receive hands‑on training and mentorship and will have direct client exposure as you grow into the role.

An Associate will also have the opportunity to support cybersecurity‑adjacent practices, including privacy and cybersecurity litigation and enforcement, as well as privacy and AI advisory work.

The ideal candidate is a proactive, curious, and collaborative team member who is eager to learn and develop a career in cybersecurity and incident response.

• Two to four years of cybersecurity/privacy experience in a technology‑focused practice, with a strong preference for direct incident response experience.
• Strong academic credentials
• Excellent legal research, writing, and analytical skills
• Clear and effective communication abilities, both written and verbal
• Sound judgment, attention to detail, and ability to work under time pressure, particularly during incident response matters
• A team‑first mindset and the ability to collaborate across disciplines
• Membership in the State Bar of the office where you wish to be based (or ability to become admitted promptly).

Please apply online at  and include a resume, J.D. transcript, and cover letter.

Search firm recruiters must submit using our Search Firm Portal. Please contact  for agreements and login credentials.

If you have any questions, please reach out to Kristen Verrastro, Recruiting Manager, at

At our core, we value collegiality among our lawyers and strive to make our practices both professionally and personally rewarding. We’ll help you to connect with peers and mentors to ensure you are integrated into our client teams. Our top‑notch training and mentoring programs, retreats and academies, and shadowing opportunities are what set us apart. If you are passionate about innovative work in a dynamic environment, you’re just who we’ve been looking for.

The expected salary range for this position is between $235,000 and $310,000.

Orrick is committed to providing a comprehensive, competitive, and thoughtful total compensation package to our attorneys and staff, wherever they work. This compensation and benefits information is based on the Orrick’s estimate as of the date of publication and may be modified in the future. The level of pay within the range will depend on a variety of job‑related factors that may include, but not limited to, qualifications, relevant experience or education, particular skills or expertise, geography.

Other compensation may include an annual discretionary merit bonus,…