Security Analyst, Presales

At Bolster, you’ll be part of the team protecting major global brands from phishing, impersonation, and online fraud campaigns targeting their users and employees. You’ll work in a highly dynamic environment investigating suspicious domains and websites, validating real-world threats, and pursuing takedown actions during active proof-of-concept (POC) evaluations. This role supports Sales and Solutions Engineering by uncovering and confirming malicious activity, performing threat hunting, and helping demonstrate platform effectiveness by supporting takedowns. It is a strong opportunity to join a small and nimble team and contribute to the continued growth of Bolster’s protection platform.

Responsibilities :
• Review and assess emerging phishing, impersonation, and online fraud threats targeting Bolster’s prospects.
• Identify and pursue takedowns for malicious content across web, social media platforms, and mobile application stores, including impersonation accounts, fraudulent applications, and related abuse.
• Perform targeted threat hunting to identify malicious domains, credential harvesting sites, fake login portals, and related attacker infrastructure across multiple modules.
• Use OSINT tools and investigative techniques (WHOIS, DNS records, certificate transparency, search-based discovery, and infrastructure pivoting) to enrich findings and uncover related malicious activity.
• Analyze suspicious websites, hosting infrastructure, DNS records, redirects, and related artifacts to detect attack patterns and emerging abuse trends.
• Pursue takedown actions during active proof-of-concept (POC) evaluations and track each case through successful remediation.
• Coordinate with registrars, hosting providers, and relevant abuse contacts to drive timely enforcement actions.
• Monitor previously reported malicious infrastructure to confirm suspension and identify re-registration, reactivation, or attacker evasion attempts.
• Support the Sales team with technical validation and threat intelligence during active POCs and evaluations.
• Generate periodic and ad-hoc reports highlighting threat activity, detection insights, and remediation outcomes.

Qualifications:
• 2+ years of experience in trust & safety or brand protection, with a focus on Pre-Sales.
• Well versed with phishing, impersonation, credential harvesting, and online fraud activity, including investigative and reporting workflows.
• Experience supporting technical evaluations, proof-of-concepts (POCs), or internal presales efforts is strongly preferred.
• Understanding of internet infrastructure, including domains, DNS, hosting providers, redirects, and attacker infrastructure.
• Knowledge of security and fraud detection principles and common attacker tactics, techniques, and procedures.
• Self-motivated and detail-oriented with the ability to work independently as well as collaboratively.
• Strong analytical and investigative mindset, including problem-solving and hypothesis-driven investigation.
• Strong written and verbal communication skills with the ability to clearly document findings and summarize technical information internally.
• Security certifications (Security+, GSEC, or similar) are a plus.
• Willingness and openness to assist with time-sensitive investigations aligned with active presales evaluations or critical incidents.

Why Bolster

Bolster is redefining fraud and brand protection. Our AI-driven SaaS platform detects and takes down phishing and scam sites in real time, protecting the world’s top brands and millions of consumers.

Our culture values collaboration, curiosity, and ownership — every team member has a voice and an impact. We believe in building elegant, scalable solutions while maintaining a spirit of experimentation and fun.

Learn more about our cultural values: bolster.ai/about-us

What we offer:
-Excellent medical, dental, and vision insurance
-Flexible time off + paid holidays.
-Equity + 401(k) plan