Job description
Job Title: Incident Response Associate Attorney (2–6 Years of Experience)
Location: 100% Remote (U.S.-based)
Compensation Range: $140,000 – $220,000, commensurate with experience
Practice Area: Cybersecurity & Data Privacy
About the Firm
Join a leading global law firm with a robust presence across 45+ offices spanning North America, Europe, Latin America, Asia-Pacific, and the Middle East. With a deep bench of experienced attorneys and cross-border resources, the firm is consistently recognized for its expertise in complex regulatory, litigation, and advisory work. The Cyber & Data Privacy team is highly ranked for its agile response to data breaches and cyber incidents of all sizes across a variety of industries.
Position Overview
We are seeking an associate attorney with 2–6 years of relevant experience to join our dynamic and growing Cyber Incident Response team. This is a fully remote position open to candidates located within the United States.
The ideal candidate will have direct experience advising clients through cybersecurity incidents and regulatory investigations. Candidates from both private practice and in-house legal departments are encouraged to apply.
Responsibilities
-
Act as breach counsel in response to cybersecurity incidents involving ransomware, business email compromise, and other network intrusions.
-
Manage and coordinate incident response efforts involving forensic firms, insurers, PR teams, and other third-party vendors.
-
Advise clients on regulatory notification obligations and coordinate filings with state, federal, and international authorities.
-
Support clients with post-incident remediation, litigation exposure, and regulatory inquiries (e.g., FTC, SEC, state AGs).
-
Work closely with global colleagues to ensure a consistent and strategic approach to cross-border data breach management.
-
Draft incident response documentation, client alerts, and related materials.
Qualifications
-
J.D. from an accredited law school and active bar membership in at least one U.S. jurisdiction.
-
2–6 years of legal experience, with a focus on data breach response, cybersecurity law, or privacy-related matters.
-
Strong understanding of state data breach laws, GDPR/UK GDPR, HIPAA, and industry regulations such as GLBA or NYDFS.
-
Excellent communication, organizational, and client-relations skills.
-
Experience in high-pressure environments managing multiple stakeholders.
-
Familiarity with cyber insurance frameworks is a plus.
Why Join Us?
-
Work remotely with autonomy while being part of a collaborative global network.
-
Engage with high-profile clients across industries including finance, healthcare, retail, and technology.
-
Be part of a premier, international Cyber & Data Privacy practice with opportunities for career development and cross-border work.
-
Competitive compensation and comprehensive benefits package.
