Project Attorney, Cybersecurity

The role

Orrick is seeking a Project Attorney, Cybersecurity with 1-3 years of experience to join its Technology practice group in the US. This role focuses on incident response, offering an opportunity to develop expertise in dynamic legal areas.

What you'll do

• Triage and coordinate the response to security incidents across legal, technical, and business stakeholders
• Analyze applicable breach notification laws and advise on notification obligations and timelines
• Advise on the security aspects of strategic corporate transactions
• Advise security teams on the nascent legal landscape of offensive security and darkweb intelligence gathering
• Direct and coordinate forensic investigations, including scoping engagements and liaising with forensic vendors
• Assess and manage regulatory reporting obligations, litigation holds, and related risk during active incidents
• Draft and review incident-related communications, including notification letters, public statements, and internal updates
• Conduct data impact assessments and support clients with post-incident remediation, readiness improvements, and governance
• Support triage, fact development, regulatory analysis, client communications, forensic coordination, and breach notification workflows
• Support projects to operationalize and improve the practice’s incident response capabilities
• Develop and refine incident response workflows, intake and triage processes, and standard operating procedures to streamline the delivery of legal services during active incidents
• Understand the firm’s available resources and technology, and develop best practices and other programs to drive teams and tasks to the “right” resources
• Work on projects to digitalize the practice, including automation, data capture and use of online resources
• Support the firm’s data strategy, including tracking matter data, monitoring usage of practice content and resources, and capturing experience data
• Support, coordinate, and lead projects to integrate technology, including generative AI, into the practice of law
• Vet, pilot, and support the onboarding of technology to support the legal practice
• Support, coordinate, and lead projects to develop and improve client-facing solutions
• Design and improve solutions to share matter metrics, data, and regulatory insights with clients and teams
• Capture and leverage matter, experience, and regulatory data to improve and inform future incident response engagements
• Create and automate knowledge and precedent libraries, including notification templates, regulatory reference materials, jurisdictional analysis tools, and response checklists
• Identify relevant practice content in collaboration with the firm’s Research & Information team, including third-party resources and forms, and integrate them into practice workflows
• Identify additional areas of opportunity for practice content and knowledge sharing and creation, and process improvements
• Evaluate the efficient delivery of incident response legal services through internal data, external benchmarking, and market trend monitoring, and identify opportunities to improve client service
• Educate lawyers and legal professionals on incident response tools, firm resources, technology, and other initiatives to improve legal services
• Communicate and consult with attorneys, paralegals, and staff on efficiency, client solutions, and technology projects related to the practice
• Develop and maintain case studies and innovation materials to support marketing and business development for the practice

What we're looking for

Hiring contacts