Jérémy GOMES Founder of ForenShield · Head of CSIRT

• Incident response (CSIRT)
• Security operations (SecOps)
• Monitoring and detection (Elastic Stack)
• Response playbooks
• Digital forensics
• OSINT
• Offensive security (OSCP)
• Vulnerability management (Qualys VMDR)
• Data and access security (Varonis)
• Container security (Docker)
• PCI DSS
• LPM
• Cybersecurity training
• Systems and network administration
• Project management

• Incident response

  Head of CSIRT, VINCI Autoroutes

  Running the CSIRT: alert triage, investigation, containment and lessons learned, with response playbooks and monitoring on Elastic Stack (ELK).

  • CSIRT
  • Playbooks
  • Elastic Stack
  • SecOps

  In practice

  • Alert closure memos
  • Compromise diagram

• Digital forensics

  Founder of ForenShield

  Offline analysis of memory and Windows artifacts with ForenShield Client, event log review and analysis of suspicious e-mails (headers, SPF, DKIM, DMARC).

  • DFIR
  • Windows artifacts
  • Event IDs
  • Phishing

  In practice

  • Windows Event ID reference
  • E-mail analyzer (EML)
  • Suspicious URL sandbox

• Offensive security

  OSCP (OffSec), Root-Me profile

  OSCP-certified attacker mindset: reconnaissance, exploitation, privilege escalation and pivoting, kept sharp with Root-Me challenges.

  • Pentest
  • OSCP
  • Root-Me
  • OSINT

  In practice

  • Domain OSINT
  • HTTP and certificate analysis

• Vulnerability management

  Qualys VMDR

  Detection, prioritization by severity and exposure, remediation tracking. Daily CVE watch, including the CISA KEV catalog of actively exploited flaws.

  • VMDR
  • CVSS
  • CISA KEV
  • Patch management

  In practice

  • CVE database
  • CVSS calculator

• Data, access and containers

  Varonis VCA, Docker DCA

  Access rights audits and usage monitoring on sensitive data (Varonis); securing container images, runtime and orchestration (Docker).

  • Varonis
  • Least privilege
  • Docker
  • Containers

  In practice

  • CIA(T) impact analysis

• Compliance

  PCI DSS, LPM

  PCI DSS requirements for payment card data and French LPM obligations for operators of vital importance (SIIV, accreditation, detection).

  • PCI DSS
  • LPM
  • OIV
  • SIIV

  In practice

  • OIV, LPM, SIIV, PASSI, PDIS glossary (FR)

• OSCP

  Offensive Security Certified Professional

  OffSec

  Penetration testing

• Qualys VMDR

  Vulnerability Management, Detection and Response

  Qualys

  Vulnerability management

• VCA

  Varonis Certified Administrator

  Varonis

  Data and access security

• Docker DCA

  Docker Certified Associate

  Docker

  Container security and operations

Regulatory frameworks

• PCI DSSPayment Card Industry Data Security Standard.
• LPMFrench Military Programming Law: cybersecurity obligations for operators of vital importance.Understand the LPM and related acronyms (FR)

• Cybersecurity training

  I have delivered cybersecurity training to pass on good habits and field-tested methods.

• Helping non-profits

  I have helped non-profits solve their cybersecurity issues.

1. VINCI Autoroutes

   Permanent · Mandelieu-la-Napoule, France · Hybrid

   • Head of CSIRT April 2026 – present
   • SecOps Manager, Escota January 2023 – April 2026

   Skills:Elastic Stack (ELK)Playbooks

2. ForenShield

   Self-employed · Remote

   • Founder 2025 – present

   French cybersecurity ecosystem: Windows forensics software, free OSINT and forensics tools, awareness and threat watch.

3. ZooCloud — online pet shop

   Self-employed · France · Remote

   • Founder January 2024 – November 2024

4. Cyberdian Groupe

   Permanent · Mandelieu-la-Napoule, France · Hybrid

   • Cybersecurity analyst July 2021 – December 2022

   Skills:Elastic Stack (ELK)Playbooks

5. Saint-Gobain Sekurit

   Permanent · Thourotte, France · On site

   • IT manager / IT engineer July 2014 – July 2021

Early career: IT support and audit, GCINET – Solutions Informatiques (internship, November 2012) · IT technician, Compiègne et son agglo (internship, October – November 2011)

• IPI, computer science school

  Master’s degree (RNCP level 7) — IT security engineering expert and project manager

  2018 – 2019

• IPI, computer science school

  Master 1 — Systems, network and database administrator

  2017 – 2018

• PROMEO Formation

  Professional bachelor’s degree — Networks and computer engineering

  2016 – 2017

• PROMEO Formation

  BTS (two-year higher diploma) — IT services for organizations

  2014 – 2016

• Lycée Arthur Rimbaud

  Vocational baccalaureate — Digital electronic systems

  2011 – 2014

• ForenShield ClientPortable, offline Windows forensics software: memory and system artifact analysis, automatic HTML report.Discover
• Free toolboxOver 40 online cybersecurity and OSINT tools: e-mail analysis, CVSS, OSINT, Windows Event ID reference.Discover
• Interactive awarenessFree modules to understand attacks: phishing, ransomware, injections, keyloggers.Discover
• CyberDashboardCERT-FR and CISA watch, OSINT feeds and security tools on one customizable dashboard.Discover

Articles are written in French.

• NewsLevel: Intermediate

  Cyberattaque Danfoss : les frigos de supermarchés visés

  Cyberattaque Danfoss : des contrôleurs de réfrigération piratés ont réchauffé des supermarchés français. Faits confirmés et recommandations du CERT-FR.

  13 Oct 20266 min

  Read the analysis
• VulnerabilitiesLevel: Expert

  GitLab : une faille critique CVSS 10 corrigée

  GitLab corrige CVE-2026-97229 (CVSS 10), un dépassement d'entier dans son compilateur CI/CD permettant une exécution de code sans authentification.

  13 Oct 20264 min

  Read the analysis
• VulnerabilitiesLevel: Expert

  Apache Struts : quatre failles corrigées, une RCE

  Apache Struts corrige quatre vulnérabilités dont une injection OGNL menant à une exécution de code à distance. Versions touchées et correctifs.

  12 Oct 20264 min

  Read the analysis
• ThreatsLevel: Intermediate

  ARTEX AI : des agents Claude dans une cyberattaque bancaire

  Selon CrowdStrike, un pirate a combiné l'outil ARTEX AI et des agents Claude Code pour attaquer des banques sud-coréennes. Chaîne d'outils, cibles et défenses.

  12 Oct 20265 min

  Read the analysis

• Chess

  I love chess: anticipating, reading the opponent and staying calm under pressure, good training for incident response.

• Animals

  Animals mean a lot to me, and I spend time with them whenever I can.

• Animal shelter volunteer

  In 2025, I volunteered at the SPA, the French animal protection society.

• Motorcycling

  I rode motorcycles for several years, track days included. Focus, precision and risk management: reflexes that also help in crisis management.

  • Road
  • Track

• Anime

  Big anime fan: One Piece and Naruto are universes I love, with worlds, characters and stories built over hundreds of episodes.

  • One Piece
  • Naruto
  • Dragon Ball
  • Death Note
  • Ghost in the Shell

• History and culture

  I like to understand how we got here: history, culture, sects, conflicts between countries. Behind every event, I look for the why.

  • History
  • Geopolitics
  • Conflicts
  • Sects

• Religions

  Curious by nature, I have read several holy books to understand each culture and its view of the world.

  • Holy books
  • Cultures