Data, Privacy & Cybersecurity Associate Attorney

Direct Counsel is seeking a Data, Privacy & Cybersecurity Associate Attorney to join a prestigious Am Law firm in Washington, D.C. This is an exceptional opportunity for an attorney with 2-4 years of experience in cybersecurity, privacy, and technology regulatory matters to join a nationally recognized Data, Privacy & Cybersecurity practice. The team advises leading companies across the technology, life sciences, digital health, enterprise software, manufacturing, professional services, and financial services industries on complex cybersecurity incidents, privacy compliance, and technology risk management. Responsibilities Advise clients on cybersecurity incident response, including legal analysis, breach assessment, regulatory obligations, and strategic response planning. Assist with regulatory investigations, inquiries, and reporting obligations following cybersecurity incidents. Develop incident response plans, cybersecurity policies, and breach preparedness programs. Support tabletop exercises, cyber risk assessments, red team simulations, and vulnerability disclosure programs. Counsel clients on cybersecurity governance, third-party risk management, and information security compliance. Analyze federal, state, and industry-specific cybersecurity and privacy regulations, including recognized cybersecurity frameworks such as NIST CSF. Advise on cybersecurity and privacy issues arising from product development, commercial transactions, and cross-border data transfers. Manage client workstreams while collaborating directly with clients and multidisciplinary legal teams.

J.D. from an ABA-accredited law school. Active membership in, or eligibility for, the District of Columbia Bar. 2-4 years of experience in cybersecurity, privacy, technology regulatory counseling, incident response, or a related practice area. Experience gained at a law firm, government agency, or in-house legal department is welcomed. Experience supporting cybersecurity incident response, breach notifications, or regulatory investigations is strongly preferred. Familiarity with cybersecurity frameworks (such as NIST CSF ) and U.S. privacy and cybersecurity regulatory requirements is a plus. Excellent legal research, analytical, drafting, and communication skills. Ability to manage multiple priorities while delivering high-quality client service in a fast-paced environment.

Salary: $235,000-$310,000, commensurate with experience and qualifications. Comprehensive benefits package, including: Medical, dental, and vision insurance 401(k) retirement plan Paid time off Annual performance and discretionary bonus eligibility Relocation assistance, where applicable