HYDERABAD · FULLTIME
Sr Technical Lead-App Development
BirlaSoft
Hyderabad · onsite · Posted 34d ago
Sourced from
Undisclosed9–13 yrsfulltimeHyderabad
About a minute. You'll make an account on the way through.
agent · working
- Read this posting0.7s
- Found the form on Naukri · 11 questions to answer1.4s
- Decided the answers for all of them3.0s
- Tailor your résumé to this role
- Waiting for you
Section · 01
About this role
Area(s) of responsibility
Technical Evaluation & Risk Assessment
Upgrade Monitoring: Track updates, security patches, and lifecycle milestones (End-of-Life/End-of-Support) for all open-source components used across organization portfolios.
Impact Analysis: Evaluate the technical risk of proposed upgrades, identifying potential breaking changes, API deprecations, and compatibility conflicts.
Security & License Review: Assess new versions for introduced security vulnerabilities and verify that license agreements remain compliant with corporate policy.
Communication & Cross-Functional Coordination
Application Team Advisory: Author clear, actionable technical advisories for application teams detailing the urgency, benefits, and breaking changes of required upgrades.
Remediation Planning: Collaborate with product owners and engineering leads to schedule and prioritize critical upgrades within their delivery roadmaps.
Feedback Loop Management: Serve as the primary point of contact for application teams to log, track, and resolve implementation issues discovered during the upgrade process.
Process Automation & Governance
Tooling Optimization: Maintain and configure automated Software Composition Analysis (SCA) and vulnerability scanning tools to trigger alerts for out-of-date components.
Standard Operating Procedures: Define and enforce the step-by-step workflow that application teams must follow to test, validate, and deploy open-source upgrades.
Vulnerability Resolution & Patch Management
Upgrade Monitoring: Monitor security advisories, vulnerability databases, and upstream project releases to identify required security patches and version upgrades.
Risk-Based Evaluation: Evaluate the severity of vulnerabilities (CVSS scores) against the organizations specific architecture to determine the actual runtime risk and exploitability.
Impact & Compatibility Analysis: Assess proposed security upgrades for technical risks, including breaking changes, API deprecations, or regression impacts on existing applications.
Targeted Advisories: Convey actionable remediation paths to application teams, detailing the specific vulnerability details, the required upgrade version, and known migration steps.
SLA Enforcement & Tracking: Coordinate with application owners to ensure security patches are prioritized and deployed within established corporate vulnerability remediation SLAs.
Verification & Testing Support: Partner with development and QA teams to validate that the applied upgrades successfully resolve the vulnerability without introducing system instability.
Below is the indication of Technology stack that is in scope and not just limited to these. Any open source or containers are the th scope.
Core Java / Runtime
OpenJDK - open-source Java Development Kit
Eclipse Temurin - OpenJDK builds from Adoptium
Apache Maven - build and dependency management
Gradle - build automation tool
Web / Application Frameworks
Spring Framework
Spring Boot
Jakarta EE (specification; implementations include open-source servers)
Quarkus
Micronaut
Apache Struts (legacy)
JSF implementations like Mojarra (reference implementation)
Vaadin Framework (community/open-source parts)
Persistence / ORM / Data Access
Hibernate ORM
JPA implementations
MyBatis
Spring Data
jOOQ
Apache Commons DBUtils
Databases
PostgreSQL
MySQL Community Edition
MariaDB
H2 Database
Upgrade Monitoring: Track updates, security patches, and lifecycle milestones (End-of-Life/End-of-Support) for all open-source components used across organization portfolios.
Impact Analysis: Evaluate the technical risk of proposed upgrades, identifying potential breaking changes, API deprecations, and compatibility conflicts.
Security & License Review: Assess new versions for introduced security vulnerabilities and verify that license agreements remain compliant with corporate policy.
Communication & Cross-Functional Coordination
Application Team Advisory: Author clear, actionable technical advisories for application teams detailing the urgency, benefits, and breaking changes of required upgrades.
Remediation Planning: Collaborate with product owners and engineering leads to schedule and prioritize critical upgrades within their delivery roadmaps.
Feedback Loop Management: Serve as the primary point of contact for application teams to log, track, and resolve implementation issues discovered during the upgrade process.
Process Automation & Governance
Tooling Optimization: Maintain and configure automated Software Composition Analysis (SCA) and vulnerability scanning tools to trigger alerts for out-of-date components.
Standard Operating Procedures: Define and enforce the step-by-step workflow that application teams must follow to test, validate, and deploy open-source upgrades.
Vulnerability Resolution & Patch Management
Upgrade Monitoring: Monitor security advisories, vulnerability databases, and upstream project releases to identify required security patches and version upgrades.
Risk-Based Evaluation: Evaluate the severity of vulnerabilities (CVSS scores) against the organizations specific architecture to determine the actual runtime risk and exploitability.
Impact & Compatibility Analysis: Assess proposed security upgrades for technical risks, including breaking changes, API deprecations, or regression impacts on existing applications.
Targeted Advisories: Convey actionable remediation paths to application teams, detailing the specific vulnerability details, the required upgrade version, and known migration steps.
SLA Enforcement & Tracking: Coordinate with application owners to ensure security patches are prioritized and deployed within established corporate vulnerability remediation SLAs.
Verification & Testing Support: Partner with development and QA teams to validate that the applied upgrades successfully resolve the vulnerability without introducing system instability.
Below is the indication of Technology stack that is in scope and not just limited to these. Any open source or containers are the th scope.
Core Java / Runtime
OpenJDK - open-source Java Development Kit
Eclipse Temurin - OpenJDK builds from Adoptium
Apache Maven - build and dependency management
Gradle - build automation tool
Web / Application Frameworks
Spring Framework
Spring Boot
Jakarta EE (specification; implementations include open-source servers)
Quarkus
Micronaut
Apache Struts (legacy)
JSF implementations like Mojarra (reference implementation)
Vaadin Framework (community/open-source parts)
Persistence / ORM / Data Access
Hibernate ORM
JPA implementations
MyBatis
Spring Data
jOOQ
Apache Commons DBUtils
Databases
PostgreSQL
MySQL Community Edition
MariaDB
H2 Database
Skills with M/O flag are part of Specialization
Think Holistically -PL3 (Behavioural)
Win the Customer -PL3 (Behavioural)
Team Management -PL2 (Functional)
Stakeholder Relationship Management -PL2 (Functional)
Requirements Definition And Management -PL2 (Functional)
Knowledge Management -PL3 (Functional)
Programming/Software Development -PL4 (Functional)
Estimation & Scheduling -PL2 (Functional)
Change Control -PL2 (Functional)
Test Execution -PL2 (Functional)
One Birlasoft -PL3 (Behavioural)
Systems Integration And Build -PL2 (Functional)
Results Matter -PL3 (Behavioural)
Software Design -PL3 (Functional)
Get Future Ready -PL3 (Behavioural)
Software Configuration -PL4 (Functional)
Quality Assurance -PL2 (Functional)
Help the tribe -PL3 (Behavioural)
Java - PL4 (Mandatory)
RxJS - PL3 (Mandatory)
Spring Boot - PL4 (Mandatory)
React JS - PL4 (Mandatory)
REST APIs - PL3 (Mandatory)
Kubernetes - PL2 (Optional)
TypeScript - PL2 (Optional)
JavaScript - PL4 (Mandatory)
MySQL - PL3 (Mandatory)
Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.
Sourced from naukri
Section · 02
Skills
Core JavaManager Quality AssuranceApacheOpen sourceeclipseStrutsJSFJavascriptMySQLHibernate
Section · Company
About Birlasoft
BirlaSoft
IT Services & Consulting
10.9k+
employees
1995
31 years old
Pune, Maharashtra
India
About
Birlasoft combines the power of a domain, enterprise, and digital technologies to reimagine business potential. Surpassing expectations, breaking convention!
Industries
IT Services & Consulting
Employee ratings
3,764 reviews
3.4/ 5
Culture
3.3
Career growth
2.6
Work-life
3.6
Employees rate it well for
Work Life Balance532Salary397Senior Management376Work Culture319Appraisal309
Find them on