--- title: 'Product Security Engineer, Senior at TraceLink, Inc' canonical: 'https://feeny.ai/job/product-security-engineer-senior-tracelink-inc-apac-pune-india-r9rr2czbpz4p' type: 'job' last_seen: '2026-10-16' --- # Product Security Engineer, Senior at TraceLink, Inc - **Company:** TraceLink, Inc - **Location:** APAC / Pune, India - **Posted:** 2026-09-22 - **Last confirmed live:** 2026-10-16 - **Apply:** https://www.tracelink.com/about/culture-and-careers/jobs?gh_jid=5244088007 ## Job description Company overview: TraceLink is the world’s largest Agentic Business Network, enabling life sciences and healthcare companies to build and manage a scalable digital workforce of governed, no-code AI agents that execute and coordinate mission-critical supply chain operations alongside human teams. Powered by the Integrate-Once™ OPUS platform, TraceLink links more than 300,000 network participants, enabling multi-enterprise processes at global scale. Founded in 2009 with the simple mission of protecting patients, today Tracelink has 5 global offices, over 800 employees and more than 1700 customers in over 60 countries around the world. Our expanding product suite continues to protect patients and now also enhances multi-enterprise collaboration through innovative new applications such as MINT. Tracelink is recognized as an industry leader by Gartner and IDC, and for having a great company culture by Comparably. As part of the Product Security team, you will help secure and advance TraceLink's products and internal application development. Working closely with Product Managers, Architects, Software Engineers, and Security and continually improve how security is built into the software development lifecycle, including AI aspects. This is a senior individual contributor role. You will take on our hardest and least-defined product security problems, act as the security technical lead on major products and initiatives, and work with a high degree of autonomy. You are trusted to scope your own work, decide how a problem should be approached, and deliver with minimum supervision. You will remain deeply hands-on running assessments, reading and writing code, building the tooling and patterns that other engineers reuse. It increasingly also means securing AI-enabled product capabilities and the agentic tooling inside our own development pipeline, an area where the right answers are still being written and where we expect you to help work them out. What you will do: Partner with Engineering across the SDLC - Serve as senior security SME for engineering by supporting secure architecture, security requirements, and design reviews - Lead threat modeling including abuse and misuse cases for AI-enabled and agentic features - Secure coding guidance for Java and JavaScript, manual and automated code review, including review of AI-assisted and agent-generated code - Triage and validate findings from SAST, SCA, DAST and secrets scanning, separating signal from noise and driving fixes to closure and tuning or retiring rules that produce more noise than value - Hands-on security assessments and white-box testing of services, APIs, and multi-tenant boundaries - Author the secure design patterns, guidance, and reusable components that engineering teams build against by default Build the paved road - Build and improve automation and guardrails in our CI/CD pipelines including pre-merge checks, policy-as-code, and golden paths that make secure the default rather than a gate - Use AI and LLM tooling to scale security work by finding triage, code review, test generation, remediation guidance — with human verification of the output - Maintain and tune the existing security toolchain, evaluate and pilot new tooling, bringing a clear technical recommendation when it is time to adopt or drop something - Drive innovation and maturity in the SDLC with new toolsets and automation - Track coverage, false-positive rate, time to remediate, and act on what they show Secure our AI features and AI supply chain - Review LLM and agent-backed features for prompt injection, excessive agency and data leakage - Maintain clear security guidelines and controls for agentic code contributions, ensuring code review standards, proper attribution, and appropriate access safeguards - Implement safeguards that detect and block unapproved or malicious changes introduced by AI agents - Apply references such as the OWASP Top 10 for LLM Applications and MITRE ATLAS as practical engineering checklists against real attack paths and write our own guidance wherever necessary Software supply chain and vulnerability management - Maintain supply chain integrity through SBOM accuracy, build provenance, and artifact signing - Drive risk-based vulnerability prioritization using reachability, exploitability, and EPSS against agreed SLAs - Serve as technical lead during PSIRT response for significant product vulnerabilities - Support customer-facing vulnerability communications and drive the systemic fixes that prevent recurrence Grow the practice, inside and out - Develop and deliver training, run office hours and threat modeling workshops, and support security champions program - Maintain expertise in application security, emerging threat vectors, and attacker tradecraft and improve standards accordingly - Represent TraceLink's security practice externally through customer conversations, written content, and conference or community participation Skills and Requirements: - 7+ years in application or product security or software engineering with substantial security ownership - Hands-on experience applying threat modeling or other risk identification techniques - Strong knowledge of application security testing tools across SAST, SCA, DAST, secrets, IaC and a clear-eyed view of what each one does and doesn't catch - Deep understanding of the OWASP Top 10 for web, APIs and AI/LLM, including avoidance and remediation techniques, and the ability to explain real exploitability to an engineer - Strong knowledge of secure coding practices in Java and/or JavaScript able to read code fluently and submit remediation pull requests - Experience remediating complex enterprise-level security issues end to end - Working knowledge of cloud environments (ideally AWS and Azure) and CI/CD pipelines - A working understanding of how LLM-based features and AI coding assistants change the risk picture and the curiosity to go deeper - Strong analytical and problem-solving skills - Strong verbal and written communication skills, with both engineering and non-engineering audiences Preferred Skills: - Familiarity with AWS and Azure services - Knowledge of microservices, event-driven architecture and multi-tenant SaaS isolation - Experience with ASPM platforms and reachability-based vulnerability prioritization - Experience securing or red teaming AI, ML, or agentic systems - Penetration testing, CTF experience, a hacker's mindset - Bachelor's degree or equivalent experience in Computer Science, Information Systems Security, or a related field Please see the [Tracelink Privacy Policy](https://www.tracelink.com/legal-and-trust/privacy-policy)for more information on how Tracelink processes your personal information during the recruitment process and, if applicable based on your location, how you can exercise your privacy rights. If you have questions about this privacy notice or need to contact us in connection with your personal data, including any requests to exercise your legal rights referred to at the end of this notice, please contact Candidate-Privacy@tracelink.com. ## About TraceLink, Inc ## Company Overview - **One-liner**: TraceLink operates the world’s largest end-to-end digital network platform for intelligent orchestration of the life sciences and healthcare supply chain. - **Entity Type**: Private (funding stage not publicly available) - **Headquarters**: Wilmington, Massachusetts, United States (with additional offices in Rochester, NY; London, UK; Barcelona, Spain; Pune and Mumbai, India; Singapore) - **Founded**: 2009 (originating from SupplyScape, founded in 2003) - **Founders**: Shabbir Dahod (CEO) ## Core Business - **Primary industry**: Life sciences and healthcare supply chain software and platform services. - **Target customers**: B2B enterprise – pharmaceutical manufacturers, contract manufacturers (CMOs), third-party logistics providers (3PLs), wholesale distributors, health systems, and retail pharmacies. - **Mission**: To transform the way the world delivers healthcare by ensuring medicines and medical products reach patients safely, efficiently, and on time through agentic supply chain orchestration. ## Products & Services - **OPUS Platform**: A secure, cloud-based digital network and multienterprise application development platform (no-code workflow configuration, drag-and-drop editing, pre-built integrations, end-to-end dashboarding). Enables companies to create, manage, and deploy supply chain solutions. - **Amadeus AI Assistant**: An AI-powered assistant that provides instant, context-aware insights from a unified content repository, accelerating supply chain digitalization and enabling proactive, data-driven decision-making. - **Network Services**: Single integration (Integrate Once, Interoperate with Everyone™) connects customers to 291,000+ authenticated trading partners globally. Includes network onboarding, continuous compliance updates, and support for all transaction types and formats (X12, EDIFACT, IDoc, CSV, etc.). ## Market Standing - **Valuation/Market Cap**: Not disclosed (private company). - **Key Metric**: Over 1,800 life sciences and healthcare customers; network spans 128 countries with 339K+ active network links; $4.7B+ in customer savings from avoiding point-to-point integrations. - **Notable Investors/Partners**: Not publicly listed in available sources; channel partners include global leaders in implementation and operational support. - **Growth Signals**: 910+ employees worldwide (up from 800+ in earlier reports); 60+ open positions; recognized in 2023 by Merit Awards for a pioneering AI-driven solution to predict drug shortages; expanding AI capabilities with Amadeus. ## Competitive Advantages - **Integrate Once, Interoperate with Everyone™** – eliminates costly point-to-point integrations; partners can connect without integration costs. - **Largest authenticated trading partner network** in life sciences (291K+ entities) – provides real-time visibility, collaboration, and collective intelligence. - **No integration costs for partners** – network onboarding and ongoing maintenance included at no additional charge. - **Continuous regulatory compliance** – automatically adapts to changing global regulations (e.g., DSCSA, EU FMD) and applies updates across the network. ## Strategic Focus - **Agentic supply chain orchestration** – using AI and machine learning to proactively coordinate processes, partners, and data across the end-to-end network. - **Predictive analytics** – expanding Amadeus to integrate metadata, real-time intelligence, and predictive analytics to prevent drug shortages and optimize inventory. - **Network growth** – continuing to onboard trading partners and extend into new geographies and healthcare segments. ## Why Work Here - **Culture**: Emphasis on integrity, innovation, industry transformation, and impactful results. Employee Resource Groups (Women’s ERG, Health & Wellness ERG) foster inclusion and belonging. - **Work environment**: Global offices with flexible paid time off, catered office meals, wellness rooms, and a focus on work-life balance. Remote/hybrid policy not explicitly stated but likely hybrid given global footprint. - **Benefits**: Top-tier medical, dental, vision; 401(k) with company match; equity and bonus programs; tuition reimbursement; GO1 e-learning platform; leadership training; early career programs (internships, graduate hiring). - **Career growth**: Many interns transition to full-time roles; internal mobility and promotions from within; 10+ year career stories common. ## Sources 1. [tracelink.com - Main Site](https://www.tracelink.com/) 2. [tracelink.com - Culture and Careers](https://www.tracelink.com/about/culture-and-careers) 3. [tracelink.com - Our Story](https://www.tracelink.com/about/our-story) 4. [tracelink.com - Fast Facts PDF](https://www.tracelink.com/sites/default/files/2024-04/TraceLink-Fast-Facts.pdf) 5. [tracelink.com - Jobs Page](https://www.tracelink.com/about/culture-and-careers/jobs) ## Other roles at TraceLink, Inc - [Senior Program Manager (Platform)](https://feeny.ai/job/senior-program-manager-platform-tracelink-inc-apac-pune-india-shvpr49404hv) — APAC / Pune, India - [Senior Solutions Consultant (Supply Chain Business Process Architect)](https://feeny.ai/job/senior-solutions-consultant-supply-chain-business-process-architect-tracelink-bwth8za98swz) — Barcelona, Spain - [Sales Executive, Senior](https://feeny.ai/job/sales-executive-senior-tracelink-inc-wilmington-yj10nyenx3gv) — Wilmington, MA - [Senior Solutions Consultant (Supply Chain Business Process Architect)](https://feeny.ai/job/senior-solutions-consultant-supply-chain-business-process-architect-tracelink-6sh4wcmkt2yn) — France - [Director, Applied Artificial Intelligence](https://feeny.ai/job/director-applied-artificial-intelligence-tracelink-inc-wilmington-zd0g3pwrqzjb) — Wilmington, MA - [Sales Executive, Senior](https://feeny.ai/job/sales-executive-senior-tracelink-inc-united-kingdom-3zhegvdr470b) — United Kingdom - [Product Manager, Senior](https://feeny.ai/job/product-manager-senior-tracelink-inc-apac-pune-india-wmtwjq5qhbed) — APAC / Pune, India - [Senior Solutions Consultant (Supply Chain Business Process Architect)](https://feeny.ai/job/senior-solutions-consultant-supply-chain-business-process-architect-tracelink-rzjpb148qrf3) — United Kingdom - [Customer Account Management, Senior (French or Italian speaker)](https://feeny.ai/job/customer-account-management-senior-french-or-italian-speaker-tracelink-inc-pwapyn2ra1j4) — Barcelona, Spain - [Cloud Engineer II](https://feeny.ai/job/cloud-engineer-ii-tracelink-inc-apac-pune-india-7wv41xgfamwj) — APAC / Pune, India