NOMINATION HIGHLIGHTS

Gaurav Kulkarni has spent over a decade building and maturing security programs. At Staples, one of North America’s largest retail enterprises, he leads the Vulnerability Management program, responsible for identifying, prioritizing, and driving remediation of security risk across a complex, high-volume environment.

His approach goes beyond traditional scanning and patching. Gaurav drives innovation in vulnerability management by applying AI to automate and enhance end-to-end security workflows, from vulnerability triage and prioritization to intelligent risk scoring. He has built custom, in-house solutions designed around Staples’ complex operational environment and asset ecosystem, improving security efficiency, scalability, and risk visibility. Rather than applying generic industry benchmarks, his program is calibrated to the actual threat exposure and business context of the organization, enabling faster, more accurate remediation decisions with fewer manual handoffs.

At Microsoft, Gaurav managed the Variant Hunting program and also worked as an offensive security expert. The Variant Hunting program reframed how vulnerability management should operate at scale rather than treating each bug as an isolated fix, the program systematically investigated root causes within vulnerability classes and eliminated the conditions that allowed entire defect families to exist. One finding didn’t produce one fix. It produced a structural change that prevented future variants from reaching production. That shift from reactive patching to proactive class elimination is the difference between a compliance exercise and a genuine security program.

His influence extends well beyond his employer. Gaurav is a published expert contributor to the Senior Executive Cybersecurity Think Tank, where he has been cited in multiple articles on topics including AI-driven attack strategies, vulnerability risk assessment beyond CVE scores, third-party cyber risk, vendor breach accountability, and enterprise-wide security resilience. He was quoted by TechTarget on the risks of AI and biometric authentication, one of the fastest-evolving attack surfaces in enterprise security. He actively presents at industry conferences and is an active member of OWASP.

Gaurav has mentored and continues to mentor 100+ cybersecurity professionals throughout his career, a contribution recognized globally, with his work as a top cybersecurity mentor featured on Times Square. He collaborates with State University’s CyberLab and CyberRange on security awareness programs, security education advocacy, curriculum design and workforce development. He holds the EC Council Hall of Fame recognition awarded to fewer than 1% of certified professionals globally.

Vulnerability management is not about finding more vulnerabilities, It is about knowing which ones will be used against you, eliminating the conditions that create them, and building programs smart enough to keep pace with adversaries who don’t wait. Gaurav Kulkarni has made that discipline the center of his leadership style.