NOMINATION HIGHLIGHTS

Gaurav Kulkarni doesn’t treat vulnerability management as a patching exercise. He treats it as a business risk function and his results reflect that distinction.

As Senior Manager of Cybersecurity Engineering at Staples, Gaurav leads the Vulnerability Management and Offensive Security programs for one of the largest retail enterprises in North America. His approach integrates continuous vulnerability discovery, contextual risk-based prioritization, and red team validation into a single coordinated function, closing the loop between what scanners find and what adversaries actually exploit.

At Microsoft, Gaurav led a Variant Hunting program that fundamentally reframed how vulnerability management should work. Rather than treating each bug as an isolated fix, the program systematically investigated the root cause/pattern behind each vulnerability class, then eliminated the anti-patterns that allowed the entire class to exist. One finding didn’t produce one fix. It produced a structural change that prevented future variants from ever reaching production. That shift from reactive patching to proactive class elimination is the difference between a compliance program and a genuine security program.

Apart from his leadership roles, Gaurav has been recognized as a subject matter expert on AI-enabled threats. He was quoted by TechTarget on the risks of AI. He is an active member of Senior Executive Cybersecurity Think Tank where he contributes expert analysis to the Think Tank’s published 2026 Cyber Risk Report. He has mentored and continues to mentor 100+ cybersecurity professionals, and is co-designing a practitioner-to-practitioner cybersecurity workforce pipeline between State University and the states technology services.
He holds the EC Council Hall of Fame recognition, awarded to fewer than 1% of certified professionals.

Effective vulnerability management is not about finding more vulnerabilities. It is about eliminating the conditions that create them. Gaurav Kulkarni has made that discipline the center of his leadership workflow.