Full-Time

Security Analyst

Threat Hunting

Posted on 9/19/2025

Bolster

Bolster

51-200 employees

AI-driven real-time external attack-surface protection

No salary listed

Noida, Uttar Pradesh, India

Hybrid

In-office attendance required 3 days per week.

Category
IT & Security (4)
, , ,
Required Skills
Machine Learning
Requirements
  • 2+ years of experience in the space of cybersecurity
  • Written and spoken fluency in the English language
  • Ability to work in a fast-paced environment with SLAs & deadlines
  • Worked with open-source technology in cybersecurity in the past
  • 1+ years of experience in the space of detecting online phishing
  • Past startup experience
Responsibilities
  • Detect phishing and scams on the internet, social media, and dark web for Bolster's customers
  • Monitor, analyze and create reports for customers based on your findings
  • Work with multiple teams across the organization
  • Train Bolster's automated phishing and scam detection engine
  • Follow processes laid out by your team lead/ manager

Bolster.ai protects businesses from online threats using AI to detect and stop phishing, fraud, and brand abuse in real time. It guards the external attack surface—domains, websites, social channels, and other public digital assets. The platform provides real-time detection APIs and automated takedown tools that integrate into existing systems on scalable subscription plans. The goal is to reduce the impact of online threats on clients’ brands and operations by quickly detecting, preventing, and removing threats.

Company Size

51-200

Company Stage

Series B

Total Funding

$46M

Headquarters

Santa Clara, California

Founded

2017

Simplify Jobs

Simplify's Take

What believers are saying

  • Raised $14M Series B from M12 in 2024, serving 120+ customers including Fortune 500 brands.
  • Launched Marketplace Monitoring on May 4, 2026, expanding into e-commerce fraud protection.
  • Brand Guardian partnership on March 25, 2026, combats AI-driven impersonation at scale.

What critics are saying

  • Microsoft Copilot plugin commoditizes CheckPhish, slashing standalone revenue by 2027.
  • Amazon Brand Registry automates 90% marketplace takedowns for free, eroding new tiers.
  • CrowdStrike outage exposed detection gaps, driving customers to bundled EDR platforms.

What makes Bolster unique

  • Bolster AI Security for Email automates full phishing lifecycle from triage to cease-and-desist letters.
  • CheckPhish plugin integrates with Microsoft Security Copilot for natural language phishing scans.
  • Marketplace Protection detects and removes counterfeit listings across global platforms 20x cheaper.

Help us improve and share your feedback! Did you find this helpful?

Benefits

Hybrid Work Options

Growth & Insights and Company News

Headcount

6 month growth

1%

1 year growth

-1%

2 year growth

8%
IT Security News
Mar 30th, 2026
RSAC 2026: fraud becomes a ciso-level security threat.

RSAC 2026: fraud becomes a ciso-level security threat. 2026-03-30 20:03 I sat down with the CEO of Bolster AI at RSAC 2026 to talk about the changing fraud landscape. Cybersecurity news subscription Read the original article:

PR Newswire
Mar 25th, 2026
Leading cybersecurity firm launches Brand Guardian powered by Bolster AI to combat phishing and fraud

Bolster AI has partnered with an unnamed global cybersecurity company to power Brand Guardian, a solution designed to combat AI-driven brand impersonation and phishing campaigns. The partnership was announced on 25 March 2026. Brand Guardian combines global internet infrastructure with Bolster's AI-driven fraud detection and automated takedown technology to help enterprises identify and disrupt impersonation campaigns. The solution detects fraudulent domains, websites and social media accounts, and can observe attacks from victims' perspectives to uncover geo-targeted fraud. The platform addresses the growing threat of generative AI-enabled fraud, which allows attackers to create convincing fake websites at unprecedented scale. Bolster AI CEO Rod Schultz noted that cybersecurity teams must shift focus from protecting corporate infrastructure to safeguarding customers, now the fastest-growing attack surface.

Cheyenne Ventures
Aug 19th, 2025
Bolster and ThreatQuotient Unite to Help Security Teams Stop Threats Sooner

By uniting Bolster's intelligence with ThreatQuotient's platform, security teams can connect the dots earlier in the kill chain-spotting a phishing site before the email lands, identifying a fake app before users report issues, and linking leaked credentials to specific adversary campaigns.

PR Newswire
Jun 5th, 2025
Bolster Ai Unveils Checkphish Plugin For Microsoft Security Copilot

Seamless integration allows users to scan links from directly within the Microsoft ecosystem for faster detection of phishing scams and fraudSANTA CLARA, Calif., June 5, 2025 /PRNewswire/ -- Bolster AI , a leader in external threat protection for companies, brands, and customers, today announced its popular URL and webpage scanner, CheckPhish is now available as a plugin for Microsoft Security Copilot. The CheckPhish plugin provides users with an easy way to run phishing and malware link checks from within the Microsoft ecosystem, simplifying security workflows and allowing security teams to quickly launch takedowns and remediation."AI is critical for cybersecurity, empowering organizations to protect themselves at machine speed at a time when cyber-attacks are happening faster than ever before, and talent shortage is impacting defender teams. Microsoft is fortunate to have partners committed to harnessing the power of AI and bringing the best-in-class security protection to their customers." - Vasu Jakkal, Corporate Vice President, Microsoft Security.Introducing the CheckPhish plugin for CopilotBolster's new CheckPhish integration with Microsoft Copilot allows security teams to investigate phishing and malware threats using natural language prompts — without ever leaving their Microsoft environment. Users can ask simple questions like "Is this link safe?" and instantly receive comprehensive threat analysis powered by Bolster's multi-source intelligence engine, which includes data from Microsoft Threat Intelligence, ReversingLabs, Shodan, and more. The integration streamlines threat detection and investigation workflows, making it faster and easier for teams to identify and respond to emerging attacks."This integration marks a major step forward in how we protect brands and customers from AI-driven scams," said Rod Schultz, CEO of Bolster. "With CheckPhish now embedded in Microsoft Copilot, we're making threat detection as easy as asking a question — giving analysts the speed, scale, and intelligence they need to stay ahead of emerging attacks

PR Newswire
Jul 22nd, 2024
Bolster Detects Spike In Phishing Sites Following Crowdstrike Incident, Offers Free Checkphish Tool For Protection

Cybersecurity and Infrastructure Security Agency (CISA) warns that threat actors are taking advantage of recent IT outage via phishing scams and other malicious activitySANTA CLARA, Calif., July 22, 2024 /PRNewswire/ -- Bolster , a leader in multi-channel phishing protection, today announced that its free CheckPhish site , one of the most popular phishing and scam detection sites on the internet, has detected a spike in malicious activities, with more than 40 phishing and phony lookalike domains created in the first 24 hours following the CrowdStrike software incident.CheckPhish is a free, real-time URL scanner that uses an array of machine learning algorithms to determine if a site is malicious or not. Since its inception in 2018, it has scanned more than 6.5 billion URLs. With CheckPhish, you can scan suspicious URLs and monitor for typosquats and lookalikes variants of a domain."We have been watching the reality behind the CISA's warning play out in real-time. In the early hours of July 19, scammers began trying to lure victims into various scams. Within the first 24 hours, more than 40 typosquat domains were targeting CrowdStrike users and had been added to the CheckPhish site," said Abhilash Garimella, vice president of Research at Bolster. "A typosquat, or lookalike domain, resembles a legitimate domain but with variations, such as common misspellings or additional characters

INACTIVE