StepSecurity
https://stepsecurity.ioAbout
StepSecurity is dedicated to enhancing CI/CD security by providing solutions to prevent pipeline attacks. Founded by seasoned security professionals with experience at Microsoft, Uber, and Plaid, StepSecurity addresses the security gaps highlighted by major breaches like SolarWinds and Codecov.
Founders:
- Varun Sharma: CEO & Co-Founder, formerly at Microsoft.
- Ashish Kurmi: CTO & Co-Founder, with experience at Plaid, Uber, and Microsoft.
Advisors:
- Sekhar Sarrukai, David Cross, Gagan Gulati, Jordan Harband, Ram Shankar Siva Kumar.
Investors:
StepSecurity is backed by leading VCs and notable angel investors, including Anmol Malhotra (Coinbase), Ash Devata (GreyNoise), and David Cross (Rain Capital).
Funding raised: $3M - Seed Funding
For more detailed information, visit - https://www.stepsecurity.io/team
Tech stack
Go Programming (Golang)
Amazon Web Services (AWS)
NodeJS (Node.js)Candid answers by the company
StepSecurity provides a comprehensive security platform for GitHub Actions
Product showcase
Photos
Company social profiles
Jobs at StepSecurity
Go Programming (Golang)Amazon Web Services (AWS)About StepSecurity
StepSecurity, a US-based cybersecurity startup prevents, detects, and responds to software supply chain attacks by analyzing behavior across the full software development lifecycle for both developers and AI coding agents. We are building a vertical AI agent for supply chain security across three pillars: securing AI agents on developer machines, OSS package security, and CI/CD security, covering the entire agentic pipeline from dev environment to cloud.
We are a 16-person team, founded by Varun Sharma (ex-Microsoft, 21 years, led supply chain security for Azure) and Ashish Kurmi (ex-Uber, Microsoft, Plaid, 17 years).
About the Job
We are seeking backend engineers to build and maintain our CI/CD security platform's backend systems and components (GitHub Actions). This high-impact role involves setting best practices and owning engineering processes, with contributions used by thousands of developers globally. Our primary languages are Golang and Node.js.
Requirements
- 2–5 years of experience, strong engineering fundamentals (cyber security background not mandatory), AI-native mindset, comfortable with a hands-on zero-to-one environment. We use Golang as our primary language.
- Must-haves: Golang backend programming; AWS/Azure/GCP background; scalable/fault-tolerant system design.
- For all engineering positions, prior early-stage startup experience is a must-have requirement.
- Bachelor’s or Master’s degree in Computer Science, Engineering, or a related field.
- Solid understanding of software development principles, design patterns, and best practices.Expertise in building scalable and fault-tolerant systems.
- Strong collaborative and problem-solving skills.
- Self-motivated, creative thinker with a drive for continuous improvement.
- Experience in a startup or high-impact, outcome-driven environment.
Location
India remote. Candidates should be able to overlap a few hours with Pacific Time (PT) when working on urgent customer issues as required.
Responsibilities
- Design, develop, and maintain robust, scalable software solutions.
- Architect and implement CI/CD components (GitHub Actions).
- Deliver features incrementally in quick iterations.
- Write clean, efficient, and maintainable code following industry best practices.
- Conduct code reviews and provide constructive feedback.
- Troubleshoot and debug complex software issues promptly.
Why Join Us
- StepSecurity is at the forefront of supply chain security research and product development. We were the first to detect several major supply chain attacks in 2025 and 2026 such as the axios npm compromise, tj-actions, etc (https://www.stepsecurity.io/newsroom)
- Our research and findings are regularly cited by major publications such as Bloomberg, TechCrunch, Hacker News, and Dark Reading. The Cybersecurity and Infrastructure Security Agency (CISA), the primary cybersecurity agency for the US federal government, has published several cybersecurity advisories citing StepSecurity (e.g., https://www.cisa.gov/news-events/alerts/2025/09/23/widespread-supply-chain-compromise-impacting-npm-ecosystem)
- In addition to having several enterprise customers, StepSecurity has been adopted by more than 15,000 open-source projects, including projects from Microsoft, Google, Amazon, Datadog, and others.
- Engineers joining now get to work on hard, high-impact problems at the intersection of security, AI, and open source, with meaningful equity upside at an early stage.
Similar companies
About the company
Passionate about education?
CK-12 is on the lookout for talented, creative, and dedicated people to join our mission to provide great education to students around the world. We are looking for candidates to join our office at Bangalore.
We have a strong education platform that has served over 200 Million users, have got over 1.45 Billion questions answered and have got more than 285 thousand customised Flexbooks. We have embarked on exciting journey to build AI-powered student tutor and Teacher Assistant to build next generation of learning platform.
About CK-12 Foundation
CK-12’s mission is to provide free access to open-source content and technology tools that empower students as well as teachers to enhance and experiment with different learning styles, resources, levels of competence, and circumstances.
To achieve this noble and ambitious vision, we at CK-12 are challenging traditional model of education to transform it dramatically. Technology has opened up lots of opportunities to revolutionize education for the benefit of students, teachers and parents.
We have chosen to be non-profit so that we can effectively realize our mission and so that we can do the right thing! It also provides us the ability to experiment big and bold ideas. CK-12 is backed by Vinod Khosla, a renowned technology venture capitalist.
At CK-12, you’ll experience the benefits of working in a dynamic, entrepreneurial, innovative and non bureaucratic environment where you will get a lot of cool things done than you ever imagined! We are a small group of passionate folks who are determined to disrupt the current form of education. We came together from companies such as Apple, eBay, Amazon, McGraw-Hill, and startups.
Technology is key to scale education and we deeply believe in it. Come develop great solutions on our cloud based (AWS) and AI-first platform delivering rich and interactive content.
Does our mission, people and technologies excite you? If the answer is YES! and you are a great technologist who will challenge status-quo (no order takers please!) by innovating, please come join us! Together, we will change the world!
Check out how CK-12 is making an impact in teaching and learning - https://www.ck12info.org/about/testimonials/
Flexi, our AI-powered Student Tutor - https://www.ck12.org/pages/student-tutor/
AI-powered Teacher Assistant - https://www.ck12.org/pages/teacher-assistant/
Benefits: Medical and Accident Insurance, Free food orders for lunch.
Location: https://goo.gl/maps/NkA2Hr8JhtE3raWr5
Jobs
2
About the company
NonStop io Technologies Pvt. Ltd.est. in 2015 is a software product development company.We invest in our client’s vision, build the technology and make sure the end-product is in alignment with their end business goals over short and the long term.
Jobs
8
About the company
We are a technology company with a proven track record of partnering with organizations to deliver innovative mobile and cloud solutions & products. We believe that cloud and mobility are the means to deliver solutions to tomorrow’s challenges. Over the last 10 years, we have completed over 200 projects, and many of those have reached the top of the AppStores. We have worked across a number of categories including Fintech, Social, Retail, Enterprise, Lifestyle, Ticketing, Sports, Healthcare, Entertainment and many more.
We have worked with both Fortune 500 companies and innovative startups, and delivered successful products. We have a 40+ people team which, includes UI/UX designers, the best breed of engineers for iOS and Android, Full Stack Developers and Innovators. Other than design and development, Byteridge helps companies understand and define the product that needs to be built. This includes working with the stakeholders to understand the business, recognizing areas of improvement and aligning the project scope with the customers problems.
Jobs
20
About the company
Baker Street Fintech (Product Name: Cambridge Wealth) is a Financial Products Company. We help build world-class Fintech Products for our Clients who want to manage their wealth on our platform. Founded by professionals with Experiences spanning from PwC UK to Banking and Technology firms, we are a financially stable, profitable company growing quickly!
Jobs
2
About the company
GormalOne is a Agri tech enterprise with a vision to make dairy farming highly profitable for the smallest farmer, thereby ensuring India's “Nutrition security”. Our mission is driven by the use of advanced and scalable technology. Nitara, our Flagship product is an Artificial intelligence-led Precision Dairy platform focused on data-driven dairying and fostering collaboration among Dairy stakeholders for informed decision making and improved outcomes through Digitization
Jobs
11
About the company
Building quality products are a challenge !
Taking up challenges is our way of upscaling our performance.
Unico Connect is a digital product development company based in Mumbai, India, that comprises of a team of young enthusiastic nerds who thrive on great ideas and exciting projects that look to bring innovative changes in the world. We ideate, create and execute exceptional digital products that revolutionizes the face of modern business.
Jobs
10
About the company
BPO Hirings
Jobs
11
About the company
At IndiDino, we are building Bharat-focused products for a billion people with the goal of creating a net positive impact. We are driven by a simple mission — to create meaningful products that solve real problems at scale and improve the lives of people across India. By combining innovation, technology, and a deep understanding of Bharat, we aim to build solutions that empower communities and create lasting value.
Jobs
5
About the company
Ande is an AI-native, full-stack TypeScript platform built on React, Node.js, GraphQL, and Postgres, running on AWS and powering web, mobile, internal operations, deep integrations, and agentic workflows.
Our product sits at the intersection of enterprise workflows, hospitality operations, payments, compliance, procurement, and AI — giving engineers the opportunity to solve problems that combine polished user experiences with complex real-world systems.
Engineering at Ande is deeply product-oriented and systems-heavy. We care about:
- Type safety and shared abstractions
- Fast iteration and observable production systems
- High-quality user experiences
- Building durable foundations for a category-defining platform
PMs and engineers work closely with the business domain, contributing directly to:
- Booking experiences
- Client entertainment policies
- Venue operations
- Spend visibility and approvals
- Payments and procurement workflows
- Enterprise integrations
- AI-driven workflows that reduce manual coordination across enterprises and hospitality partners
Founders
- Lohit Sarma
- Ashish Bidadi
- Michael McDermott
Jobs
1
About the company
Jobs
3
