Careers with ZeroDay Law

Senior Associate / Of Counsel (Cyber & Privacy)

Are you an attorney with experience and a passion for cyber and privacy matters? Do you thrive in a flexible, remote work environment that values diversity, critical thinking and collaboration?

ZeroDay Law is seeking a talented, motivated attorney to join our team part-time. As an independent consultant, you'll have the opportunity to work on cutting-edge, high-caliber cyber and privacy projects while enjoying a healthy work-life balance.

Working with ZeroDay Law:

ZeroDay Law is a trusted partner in incident response management and planning, cyber and privacy law, cyber risk compliance and global cybersecurity ecosystem development. We’d love you to join our team, where you’ll have the opportunity to:

Be a valued member of an ambitious team working on challenging, cutting-edge cyber/privacy matters while emphasizing work-life balance.
Work closely with industry-leading cyber/privacy/incident response leader and CCWC Advisory Board member.
Join a woman-owned, minority-owned, diversity-forward organization.
Prioritize raising the profile of women of color lawyers.
Supervise junior attorneys.
Speak at conferences.

Job Requirements

Practicing attorney with relevant experience in cyber and/or privacy matters
- At least three (3) years practicing law specifically focused on cyber and/or privacy matters, or
- At least five (5) years practicing law, at least two (2) of which involved significant cyber and/or privacy matters, or
- At least two (2) years practicing law plus relevant work experience as a non-lawyer
- Preferred: Mix of private and public sector experience, previous AmLaw 100 firm experience
Strong communication, legal research and writing skills
Comfortable taking direction from business or tech experts and working with non-lawyer experts in cybersecurity, business, cybercrime or privacy
High standards for your own work
Experience delegating to, managing, and mentoring junior attorneys
Curious, investigative mindset
Ability to correctly use the word “literally”
Ability to put yourself in clients’ shoes when drafting advice
Diligent work ethic, not taking self too seriously
Bonus: cartoon drawing, coding, joke writing, interesting volunteer talents, empathy, mind-reading, crossword puzzles, taking apart electronics
Substantive experience and current working knowledge of several of the following:
- Cyber/privacy compliance program development and operation
- Strategy for and drafting policies for privacy or security programs
- Incident response from start to finish
- FTC cyber/privacy Section 5 settlements in the past three (3) years
- CCPA, GDPR, U.S. state comprehensive privacy laws and biometric privacy laws
- Privacy, security, IR-related sections of commercial contracts
- Risk assessments, compliance assessments
- Privacy/cyber regulatory investigations and litigation
- Cybercrime (domestic and global)
- NIST CSF, CIS Critical Controls, ISO 27001 family of controls, CSA CCM
- HIPAA privacy and security rules, GLBA safeguards rules, NIST SP 800-171, etc.
- Bug bounties and vulnerability disclosure programs
- New tech and innovation: AI, Web 3.0, blockchain, virtual assets, etc.

At ZeroDay Law, we are passionate about cyber and privacy law. We’d love a team member who also has a keen interest in keeping up with tech news about cybersecurity, cybercrime and privacy. Must be a practicing attorney admitted to practice and in good standing in at least one state or D.C.

Writing sample, transcripts, and background/criminal records check may be required.

Application Process

Please submit:

(1) a current resume or bio,

(2) relevant projects chart (3-6 cyber/privacy matters, download template and see examples), and

(3) pick 1 or 2 projects from the 'Relevant Projects Chart' and tell us

(a) some of the substantive legal issues involved in your work, and

(b) some of the factors you considered as part of your strategy for completing the work.

Format for (3): Either written (max 1 page) or record a video (max 4 minutes)

Note: We hope this goes without saying but don’t send us any confidential or non-public information. Give us enough detail about clients or actions so we can understand the project. Not enough that we could identify the client or action.

If selected for an interview, you may be asked to provide a writing sample and/or transcript.

Our Process

At ZeroDay Law, we value your time and look forward to learning about your experience. During the interview process, we may ask questions about your work in different sectors, interesting issues, client contact, and experience with various aspects of cyber and privacy law. We are excited to hear from you and explore the possibilities of working together to tackle the challenges and opportunities in the cyber and privacy world.

We can't wait to hear your story and learn more about your passion for cyber and privacy law.

Please submit your resume and written or video project review by using the form below or by emailing careers@zerodaylaw.com.