Security Analyst, Bolster Inc.
Presales
$70-100k
+ Equity
2+ days a week in office (Santa Clara, CA)
Enterprise digital risk protection platform
Be an early applicant
Enterprise digital risk protection platform
21-100 employees
Be an early applicant
$70-100k
+ Equity
2+ days a week in office (Santa Clara, CA)
21-100 employees
Company mission
To protect brands from online fraud particularly scams, phishing and fake sites targeting their customers.
Role
Who you are
- 2+ years of experience in trust & safety or brand protection, with a focus on Pre-Sales
- Well versed with phishing, impersonation, credential harvesting, and online fraud activity, including investigative and reporting workflows
- Experience supporting technical evaluations, proof-of-concepts (POCs), or internal presales efforts is strongly preferred
- Understanding of internet infrastructure, including domains, DNS, hosting providers, redirects, and attacker infrastructure
- Knowledge of security and fraud detection principles and common attacker tactics, techniques, and procedures
- Self-motivated and detail-oriented with the ability to work independently as well as collaboratively
- Strong analytical and investigative mindset, including problem-solving and hypothesis-driven investigation
- Strong written and verbal communication skills with the ability to clearly document findings and summarize technical information internally
- Security certifications (Security+, GSEC, or similar) are a plus
- Willingness and openness to assist with time-sensitive investigations aligned with active presales evaluations or critical incidents
What the job involves
- At Bolster, you’ll be part of the team protecting major global brands from phishing, impersonation, and online fraud campaigns targeting their users and employees
- You’ll work in a highly dynamic environment investigating suspicious domains and websites, validating real-world threats, and pursuing takedown actions during active proof-of-concept (POC) evaluations
- This role supports Sales and Solutions Engineering by uncovering and confirming malicious activity, performing threat hunting, and helping demonstrate platform effectiveness by supporting takedowns
- It is a strong opportunity to join a small and nimble team and contribute to the continued growth of Bolster’s protection platform
- Review and assess emerging phishing, impersonation, and online fraud threats targeting Bolster’s prospects
- Identify and pursue takedowns for malicious content across web, social media platforms, and mobile application stores, including impersonation accounts, fraudulent applications, and related abuse
- Perform targeted threat hunting to identify malicious domains, credential harvesting sites, fake login portals, and related attacker infrastructure across multiple modules
- Use OSINT tools and investigative techniques (WHOIS, DNS records, certificate transparency, search-based discovery, and infrastructure pivoting) to enrich findings and uncover related malicious activity
- Analyze suspicious websites, hosting infrastructure, DNS records, redirects, and related artifacts to detect attack patterns and emerging abuse trends
- Pursue takedown actions during active proof-of-concept (POC) evaluations and track each case through successful remediation
- Coordinate with registrars, hosting providers, and relevant abuse contacts to drive timely enforcement actions
- Monitor previously reported malicious infrastructure to confirm suspension and identify re-registration, reactivation, or attacker evasion attempts
- Support the Sales team with technical validation and threat intelligence during active POCs and evaluations
- Generate periodic and ad-hoc reports highlighting threat activity, detection insights, and remediation outcomes
Our take
Fraud is a multi-billion dollar problem for businesses of all sizes and, as more activity moves online, it can put a real dent in user trust. So fraud-prevention platforms, like that offered by Bolster (previously RedMarlin), have never been more crucial to operations.
Bolster uses artificial intelligence to automate the process of reviewing and categorizing sites to find fraudulent activity. With things such as phishing sites on the rise, this automated approach is future-ready for the changing needs of businesses.
Bolster’s team includes industry veterans from leading companies like McAfee, Cisco, and Symantec, so they have a wealth of hefty imported experience on board. In 2024, a new CEO was also brought on to lead the company into its next phase of growth.
Steph
Company Specialist at Welcome to the Jungle
Insights
30% employee growth in 12 months
Company
Company benefits
- Stock options
- 401(k) plan
- Work from home opportunities
- Health insurance
Company HQ
North Los Altos, Los Altos, CA
Leadership
Abhishek Dubey
(Founder)Former CEO of the company. Was an Engineering Manager at Cisco Systems and Lecturer at Carnegie Mellon University, with an MS in Information Security Technology from Carnegie Mellon University.
Rod Schultz
(CEO)Advisor at Bee Partners. Former Senior Vice President of Product at DUST Identity, Head of Product Security and Privacy at Zoom, and Technical Advisor for Product at Identify3D.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 1 more job at Bolster Inc.