Full-Time

Security Analyst

Trust & Safety

Posted on 10/31/2025

Bolster

Bolster

51-200 employees

AI-driven real-time external attack-surface protection

No salary listed

Noida, Uttar Pradesh, India

Hybrid

In-office attendance required 3x per week.

Category
IT & Security (4)
, , ,
Required Skills
TCP/IP
Risk Management
Requirements
  • Over 1.5 years of related experience, specifically in security operations, incident response and vulnerability management.
  • Experience with enterprise-wide technical solution implementations.
  • Knowledge of security, development, and network infrastructure.
  • Self-motivated and detail-orientated with the ability to work independently as well as function as part of a team.
  • Has an analytical mind for problem-solving, abstract thought, and offensive security tactics.
  • Has strong interpersonal skills (written and oral communication). Customer support/ email handling would be preferred.
  • Security certifications are a plus.
  • Experience and openness to 24/7 support of customers at times
Responsibilities
  • Review the latest threats targeting Bolster's customers and prospects.
  • Analyse online content across multiple platforms including web, social media, apps stores, website building platforms, etc.
  • Train Bolster's AI engine with based on the latest threats.
  • Investigate online activity and infrastructure to determine the fraud source.
  • Engage with hosting providers, registrars, registries, etc. to shutdown online threats.
  • Track ongoing enforcement efforts and content change.
  • Provide support and written responses to customer queries and requests via tickets.
  • Support sales and customer success teams with threat intelligence for customers and prospects
  • Generate monthly and ad-hoc reports summarizing metrics and trends targeting customers and prospects.
  • Respond to security alerts to support issue resolution and minimize the impact of security events.
  • Research security issues and work with internal teams to find and track resolution.
  • Help manage and improve the issue-tracking process.
  • Create and enhance operational metrics to ensure the security programs are effective.

Bolster.ai protects businesses from online threats using AI to detect and stop phishing, fraud, and brand abuse in real time. It guards the external attack surface—domains, websites, social channels, and other public digital assets. The platform provides real-time detection APIs and automated takedown tools that integrate into existing systems on scalable subscription plans. The goal is to reduce the impact of online threats on clients’ brands and operations by quickly detecting, preventing, and removing threats.

Company Size

51-200

Company Stage

Series B

Total Funding

$46M

Headquarters

Santa Clara, California

Founded

2017

Simplify Jobs

Simplify's Take

What believers are saying

  • Raised $14M Series B from M12 in 2024, serving 120+ customers including Fortune 500 brands.
  • Launched Marketplace Monitoring on May 4, 2026, expanding into e-commerce fraud protection.
  • Brand Guardian partnership on March 25, 2026, combats AI-driven impersonation at scale.

What critics are saying

  • Microsoft Copilot plugin commoditizes CheckPhish, slashing standalone revenue by 2027.
  • Amazon Brand Registry automates 90% marketplace takedowns for free, eroding new tiers.
  • CrowdStrike outage exposed detection gaps, driving customers to bundled EDR platforms.

What makes Bolster unique

  • Bolster AI Security for Email automates full phishing lifecycle from triage to cease-and-desist letters.
  • CheckPhish plugin integrates with Microsoft Security Copilot for natural language phishing scans.
  • Marketplace Protection detects and removes counterfeit listings across global platforms 20x cheaper.

Help us improve and share your feedback! Did you find this helpful?

Benefits

Hybrid Work Options

Growth & Insights and Company News

Headcount

6 month growth

1%

1 year growth

-1%

2 year growth

8%
IT Security News
Mar 30th, 2026
RSAC 2026: fraud becomes a ciso-level security threat.

RSAC 2026: fraud becomes a ciso-level security threat. 2026-03-30 20:03 I sat down with the CEO of Bolster AI at RSAC 2026 to talk about the changing fraud landscape. Cybersecurity news subscription Read the original article:

PR Newswire
Mar 25th, 2026
Leading cybersecurity firm launches Brand Guardian powered by Bolster AI to combat phishing and fraud

Bolster AI has partnered with an unnamed global cybersecurity company to power Brand Guardian, a solution designed to combat AI-driven brand impersonation and phishing campaigns. The partnership was announced on 25 March 2026. Brand Guardian combines global internet infrastructure with Bolster's AI-driven fraud detection and automated takedown technology to help enterprises identify and disrupt impersonation campaigns. The solution detects fraudulent domains, websites and social media accounts, and can observe attacks from victims' perspectives to uncover geo-targeted fraud. The platform addresses the growing threat of generative AI-enabled fraud, which allows attackers to create convincing fake websites at unprecedented scale. Bolster AI CEO Rod Schultz noted that cybersecurity teams must shift focus from protecting corporate infrastructure to safeguarding customers, now the fastest-growing attack surface.

Cheyenne Ventures
Aug 19th, 2025
Bolster and ThreatQuotient Unite to Help Security Teams Stop Threats Sooner

By uniting Bolster's intelligence with ThreatQuotient's platform, security teams can connect the dots earlier in the kill chain-spotting a phishing site before the email lands, identifying a fake app before users report issues, and linking leaked credentials to specific adversary campaigns.

PR Newswire
Jun 5th, 2025
Bolster Ai Unveils Checkphish Plugin For Microsoft Security Copilot

Seamless integration allows users to scan links from directly within the Microsoft ecosystem for faster detection of phishing scams and fraudSANTA CLARA, Calif., June 5, 2025 /PRNewswire/ -- Bolster AI , a leader in external threat protection for companies, brands, and customers, today announced its popular URL and webpage scanner, CheckPhish is now available as a plugin for Microsoft Security Copilot. The CheckPhish plugin provides users with an easy way to run phishing and malware link checks from within the Microsoft ecosystem, simplifying security workflows and allowing security teams to quickly launch takedowns and remediation."AI is critical for cybersecurity, empowering organizations to protect themselves at machine speed at a time when cyber-attacks are happening faster than ever before, and talent shortage is impacting defender teams. Microsoft is fortunate to have partners committed to harnessing the power of AI and bringing the best-in-class security protection to their customers." - Vasu Jakkal, Corporate Vice President, Microsoft Security.Introducing the CheckPhish plugin for CopilotBolster's new CheckPhish integration with Microsoft Copilot allows security teams to investigate phishing and malware threats using natural language prompts — without ever leaving their Microsoft environment. Users can ask simple questions like "Is this link safe?" and instantly receive comprehensive threat analysis powered by Bolster's multi-source intelligence engine, which includes data from Microsoft Threat Intelligence, ReversingLabs, Shodan, and more. The integration streamlines threat detection and investigation workflows, making it faster and easier for teams to identify and respond to emerging attacks."This integration marks a major step forward in how we protect brands and customers from AI-driven scams," said Rod Schultz, CEO of Bolster. "With CheckPhish now embedded in Microsoft Copilot, we're making threat detection as easy as asking a question — giving analysts the speed, scale, and intelligence they need to stay ahead of emerging attacks

PR Newswire
Jul 22nd, 2024
Bolster Detects Spike In Phishing Sites Following Crowdstrike Incident, Offers Free Checkphish Tool For Protection

Cybersecurity and Infrastructure Security Agency (CISA) warns that threat actors are taking advantage of recent IT outage via phishing scams and other malicious activitySANTA CLARA, Calif., July 22, 2024 /PRNewswire/ -- Bolster , a leader in multi-channel phishing protection, today announced that its free CheckPhish site , one of the most popular phishing and scam detection sites on the internet, has detected a spike in malicious activities, with more than 40 phishing and phony lookalike domains created in the first 24 hours following the CrowdStrike software incident.CheckPhish is a free, real-time URL scanner that uses an array of machine learning algorithms to determine if a site is malicious or not. Since its inception in 2018, it has scanned more than 6.5 billion URLs. With CheckPhish, you can scan suspicious URLs and monitor for typosquats and lookalikes variants of a domain."We have been watching the reality behind the CISA's warning play out in real-time. In the early hours of July 19, scammers began trying to lure victims into various scams. Within the first 24 hours, more than 40 typosquat domains were targeting CrowdStrike users and had been added to the CheckPhish site," said Abhilash Garimella, vice president of Research at Bolster. "A typosquat, or lookalike domain, resembles a legitimate domain but with variations, such as common misspellings or additional characters

INACTIVE