Bolster, Inc

Security Analyst – Presales

Bolster, Inc

full-time

Posted on:

Location Type: Hybrid

Location: Santa ClaraCaliforniaUnited States

Visit company website

Explore more

AI Apply
Apply

Salary

💰 $70 - $100 per year

Tech Stack

About the role

  • Review and assess emerging phishing, impersonation, and online fraud threats targeting Bolster’s prospects.
  • Identify and pursue takedowns for malicious content across web, social media platforms, and mobile application stores, including impersonation accounts, fraudulent applications, and related abuse.
  • Perform targeted threat hunting to identify malicious domains, credential harvesting sites, fake login portals, and related attacker infrastructure across multiple modules.
  • Use OSINT tools and investigative techniques (WHOIS, DNS records, certificate transparency, search-based discovery, and infrastructure pivoting) to enrich findings and uncover related malicious activity.
  • Analyze suspicious websites, hosting infrastructure, DNS records, redirects, and related artifacts to detect attack patterns and emerging abuse trends.
  • Pursue takedown actions during active proof-of-concept (POC) evaluations and track each case through successful remediation.
  • Coordinate with registrars, hosting providers, and relevant abuse contacts to drive timely enforcement actions.
  • Monitor previously reported malicious infrastructure to confirm suspension and identify re-registration, reactivation, or attacker evasion attempts.
  • Support the Sales team with technical validation and threat intelligence during active POCs and evaluations.
  • Generate periodic and ad-hoc reports highlighting threat activity, detection insights, and remediation outcomes.

Requirements

  • 2+ years of experience in trust & safety or brand protection, with a focus on Pre-Sales.
  • Well versed with phishing, impersonation, credential harvesting, and online fraud activity, including investigative and reporting workflows.
  • Experience supporting technical evaluations, proof-of-concepts (POCs), or internal presales efforts is strongly preferred.
  • Understanding of internet infrastructure, including domains, DNS, hosting providers, redirects, and attacker infrastructure.
  • Knowledge of security and fraud detection principles and common attacker tactics, techniques, and procedures.
  • Self-motivated and detail-oriented with the ability to work independently as well as collaboratively.
  • Strong analytical and investigative mindset, including problem-solving and hypothesis-driven investigation.
  • Strong written and verbal communication skills with the ability to clearly document findings and summarize technical information internally.
  • Security certifications (Security+, GSEC, or similar) are a plus.
  • Willingness and openness to assist with time-sensitive investigations aligned with active presales evaluations or critical incidents.
Benefits
  • Excellent medical, dental, and vision insurance
  • Flexible time off + paid holidays.
  • Equity + 401(k) plan
Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools
phishingimpersonationcredential harvestingonline fraudthreat huntingOSINT toolsWHOISDNS recordscertificate transparencyinvestigative techniques
Soft Skills
self-motivateddetail-orientedanalytical mindsetproblem-solvinghypothesis-driven investigationcollaborativestrong written communicationstrong verbal communication
Certifications
Security+GSEC