Remote jobs at StepSecurity
Prevent, Detect, and Respond to Software Supply Chain Attacks
About StepSecurity
StepSecurity secures CI/CD at scale by enforcing runner-level network egress controls, providing secure, drop-in replacements for third-party actions, and ensuring only policy-compliant workflows run. Over 11,000 open-source projects, including those from Cybersecurity and Infrastructure Security Agency (CISA), Google, Microsoft, Datadog, Kubernetes, NodeJS, and Ruby, use StepSecurity to harden their CI/CD pipelines. Our enterprise tier is currently deployed at customers in the crypto, healthcare, and cybersecurity industries. The StepSecurity platform secures more than 18,000,000 CI/CD job runs every week.
Mission and direction
StepSecurity builds supply chain security software that protects the software development lifecycle by securing AI coding agents, open-source packages, and CI/CD pipelines. Its platform helps organizations prevent, detect, and respond to attacks by enforcing policy-compliant workflows and hardening development and deployment environments at scale.
Company values
- Security first
- Customer trust
- Technical excellence
- Innovation
- Open source