Software Engineer

About The Company StepSecurity is a pioneering cybersecurity company dedicated to safeguarding the software supply chain through innovative detection and response solutions. Our focus lies in analyzing behavior across the entire software development lifecycle to prevent, detect, and respond to sophisticated supply chain attacks targeting developers and AI coding agents. We are committed to building cutting-edge AI-driven security tools that secure AI agents on developer machines, ensure OSS package security, and fortify CI/CD pipelines, covering the entire agentic pipeline from development environments to cloud infrastructure. Founded by industry veterans Varun Sharma, with over 21 years of experience including leading supply chain security for Azure at Microsoft, and Ashish Kurmi, with 17 years of experience from Uber, Microsoft, Plaid, and more, StepSecurity boasts a talented team of 16 professionals working at the intersection of security, AI, and open source. Our mission is to address complex security challenges with innovative solutions, positioning us as leaders in the rapidly evolving field of supply chain security. Our groundbreaking work has positioned us at the forefront of security research and product development. We were among the first to identify major supply chain attacks in 2025 and 2026, including the axios npm compromise and tj-actions, showcasing our expertise and proactive approach. Our research is frequently cited by prominent outlets such as Bloomberg, TechCrunch, Hacker News, and Dark Reading. The US Cybersecurity and Infrastructure Security Agency (CISA) has also issued advisories referencing StepSecurity’s work, underscoring our influence and credibility in the cybersecurity community. Additionally, our solutions are adopted by over 15,000 open-source projects, including initiatives from major tech companies like Microsoft, Google, Amazon, and Datadog.

About The Role We are seeking a talented Backend Engineer to join our dynamic team and contribute to the development of our supply chain security platform. This role offers an exciting opportunity to work on high-impact, zero-to-one problems in a fast-paced, early-stage environment. As a Backend Engineer at StepSecurity, you will be instrumental in designing and building scalable, fault-tolerant backend services primarily using Golang, which form the backbone of our security solutions. You will be responsible for developing systems that operate seamlessly across the entire software development lifecycle, ensuring reliability and security at every stage. This role requires a hands-on approach, with ownership of problems from inception to deployment, allowing you to see the tangible impact of your work in protecting the software supply chain from emerging threats. You will collaborate closely with cross-functional teams, including security researchers, product managers, and DevOps engineers, to deliver robust security features and infrastructure.

Qualifications To succeed in this role, candidates should have between 2 to 5 years of experience in software engineering, demonstrating strong fundamentals in backend development. Proficiency in Golang is essential, with a proven track record of building scalable and fault-tolerant systems. Experience working with cloud platforms such as AWS, Azure, or GCP is required, along with a solid understanding of cloud architecture and deployment strategies. Prior experience in early-stage startups is highly desirable, as it indicates adaptability and the ability to thrive in a fast-moving environment. Candidates should possess an AI-native mindset, comfortable with zero-to-one development processes, and eager to tackle complex security challenges. While a security background is not mandatory, familiarity with security principles and practices will be considered an advantage.

Responsibilities Design, develop, and maintain backend services in Golang that underpin our supply chain security platform. Build and optimize scalable, fault-tolerant systems capable of operating across diverse environments and handling high volumes of data. Collaborate with cross-functional teams to define system requirements, troubleshoot issues, and implement enhancements that improve security posture. Participate actively in code reviews, testing, and deployment processes to ensure high-quality software delivery. Take ownership of features and infrastructure components, driving projects from conception through to production. Stay current with industry trends and emerging threats to continuously improve our security solutions. Contribute to the documentation of system architecture, processes, and best practices to facilitate team knowledge sharing.

Benefits At StepSecurity, we offer competitive compensation packages along with meaningful early-stage equity opportunities, providing you with a stake in the company's growth and success. Our benefits include flexible working hours, remote work options, and a collaborative, innovative work environment. We support professional development through training, conferences, and continuous learning initiatives. Join us to work on cutting-edge security challenges with a talented team committed to making a significant impact in the cybersecurity landscape. Additional perks include health insurance coverage, paid time off, and a culture that values diversity, inclusion, and work-life balance. As part of our team, you will have the opportunity to contribute to impactful projects that shape the future of supply chain security and AI safety. Equal Opportunity StepSecurity is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. We do not discriminate based on race, religion, gender, sexual orientation, age, disability, or any other protected characteristic. Our hiring process is designed to be fair and equitable, ensuring that all qualified candidates have an equal opportunity to join our team and contribute to our mission of securing the software supply chain.