• Recommend refinement for detection rules to improve accuracy and reduce false positives across SIEM and EDR platforms. • Conduct investigations into security events using tools such as Splunk, Elastic, ArcSight, and XDR platforms (Cisco XDR, Cortex XDR). • Leverage AI to analyze security trends, automate processes, and identify new patterns of threat behavior. • Develop and document detection blueprints to enhance high-fidelity alerting for security threats and compliance risks. • Assist with SOAR platform workflows to improve incident response automation. • Collaborate with internal teams to address gaps in detection visibility and implement best practice mitigations. • Provide mentorship and knowledge sharing to analysts at Level I.

• Lead and support end-to-end compliance efforts across multiple environments, including readiness assessments, audits, and continuous monitoring activities • Leading PCI DSS compliance-related activities and certification • Supporting U.S. Federal readiness efforts, including gap assessments against NIST SP 800-53 • Maintaining required evidence artifacts and ensuring traceability of evidence • Interpreting and operationalizing compliance requirements into actionable control activities for engineering and operations • Serving as SME for PCI DSS and NIST 800-53 compliance • Supporting development of FedRAMP artifacts • Partnering with control owners to ensure controls meet PCI DSS and NIST 800-53 requirements • Supporting external audits by preparing evidence and responding to auditor requests • Driving coordination with third parties to ensure shared control alignment • Ensuring audit readiness through continuous proactive gap assessments and control testing throughout the year • Identifying, assessing, and communicating compliance and security risks to stakeholders • Identifying, tracking, and driving closure of audit findings and control deficiencies • Contributing to the development and maintenance of security policies, standards, and procedures

• Review the latest threats targeting Bolster's customers and prospects. • Analyse online content across multiple platforms. • Train Bolster's AI engine based on the latest threats. • Investigate online activity and infrastructure to determine the fraud source. • Engage with hosting providers, registrars, registries and platforms to shut down online threats. • Track ongoing enforcement efforts and content change. • Provide support and written responses to customer queries. • Support sales and customer success teams with threat intelligence. • Generate monthly and ad-hoc reports summarizing metrics and trends. • Respond to security alerts to support issue resolution. • Research security issues and work with internal teams. • Help manage and improve the issue-tracking process. • Create and enhance operational metrics.

• Perform tests on web applications, APIs, internal and external infrastructure, cloud environments, and Active Directory. • Conduct manual vulnerability validations, controlled exploitation, authorized post-exploitation, and impact analysis. • Review technical findings, evidence, severity assessments, recommendations, and reports produced by the team. • Serve as an operational second opinion for defining processes and work instructions. • Support sensitive technical decisions related to significant findings, false positives, critical risks, and operational validations. • Review and standardize methodologies, playbooks, checklists, templates, and internal procedures. • Support phishing, smishing, and vishing campaigns, including planning, technical validation, result analysis, and recommendations. • Support OSINT activities, password analysis, credential exposure reviews, and monitoring of the Deep and Dark Web. • Contribute to the design of future services, including adversary simulations, tabletop exercises, ransomware simulations, and full Red Team exercises. • Support the definition of technical scope, effort estimates, and consultative discussions with clients.