Document Review Attorney

Cybersecurity Project AttorneyOrrick currently has an excellent opportunity for a Cybersecurity Project Attorney with 1-3 years experience based in Orrick Analytics. This position could be based in any of our U.
S. offices and consideration given for 100% remote US locations.

Responsibilities:
Support the fast-growing and internationally recognized Cybersecurity & Incident Response practice.
This is a hands-on role focused on the operational and legal mechanics of incident response, offering the opportunity to develop deep expertise in one of the most dynamic areas of law while working closely with seasoned practitioners on high-profile matters.
Our team manages cybersecurity incidents of every scale—including some of the largest and most complex events in history—from initial detection through resolution.
Triaging and coordinating the response to security incidents across legal, technical, and business stakeholdersAnalyzing applicable breach notification laws and advising on notification obligations and timelinesAdvising on the security aspects of strategic corporate transactionsAdvising security teams on the nascent legal landscape of offensive security and darkweb intelligence gatheringDirecting and coordinating forensic investigations, including scoping engagements and liaising with forensic vendorsAssessing and managing regulatory reporting obligations, litigation holds, and related risk during active incidentsDrafting and reviewing incident-related communications, including notification letters, public statements, and internal updatesConducting data impact assessments and supporting clients with post-incident remediation, readiness improvements, and governanceThe successful candidate will work with clients ranging from emerging companies to global enterprises across the technology, finance, life sciences and energy sectors. As a Project Attorney on the team, you will be embedded in live incident response engagements from the outset—supporting triage, fact development, regulatory analysis, client communications, forensic coordination, and breach notification workflows. You will receive hands-on training and mentorship and will have direct client exposure as you grow into the role. While the primary focus of this role is incident response, a Project Attorney will also have the opportunity to support cybersecurity-adjacent practices, including privacy and cybersecurity litigation and enforcement, as well as privacy and AI advisory work.
Practice Operations and Innovation:Developing and refining incident response workflows, intake and triage processes, and standard operating procedures to streamline the delivery of legal services during active incidentsUnderstanding the firm's available resources and technology, and developing best practices and other programs to drive teams and tasks to the "right" resources (whether people, process, or technology)Working on projects to digitalize the practice, including automation, data capture and use of online resourcesSupporting the firm's data strategy, including tracking matter data, monitoring usage of practice content and resources, and capturing experience dataSupport, coordinate, and lead projects to integrate technology, including generative AI, into the practice of law, including: Vetting, piloting, and supporting the onboarding of technology to support the legal practiceSupport, coordinate, and lead projects to develop and improve client-facing solutions, including: Designing and improving solutions to share matter metrics, data, and regulatory insights with clients and teamsCapturing and leveraging matter, experience, and regulatory data to improve and inform future incident response engagementsCreating and automating knowledge and precedent libraries, including notification templates, regulatory reference materials, jurisdictional analysis tools, and response checklistsIdentifying relevant practice content in collaboration with the firm's Research & Information team, including third-party resources and forms, and integrating them into practice workflowsIdentifying additional areas of opportunity for practice content and knowledge sharing and creation, and process improvementsEvaluating the efficient delivery of incident response legal services through internal data, external benchmarking, and market trend monitoring, and identifying opportunities to improve client serviceEducating lawyers and legal professionals on incident response tools, firm resources, technology, and other initiatives to improve legal servicesCommunicating and consulting with attorneys, paralegals, and staff on efficiency, client solutions, and technology projects related to the practiceDeveloping and maintaining case studies and innovation materials to support marketing and business development for the practiceQualifications:Juris doctorate (J.
D.) from an accredited university or college and admission to practice in good standing in a US jurisdiction required.
One to three years of experie