TotalEnergies operates across about 120 countries, spanning oil and biofuels, natural gas, biogas, low-carbon hydrogen, and a growing renewables portfolio that includes utility-scale solar, wind, and battery storage - with 10 GW targeted by the end of 2025. The company has more than 100,000 employees and has committed $12 billion to U.S. investments since 2022. From upstream exploration to refining, trading, and shipping, the attack surface is enormous: industrial control systems across energy production infrastructure, real-time trading platforms, and a sprawling global supply chain all represent distinct threat vectors that need defending.
For cybersecurity professionals, the operational context matters. This is not a single-cloud SaaS environment - it's a diversified energy company with legacy OT networks coexisting alongside modern IT and renewable energy assets. The threat model includes nation-state actors targeting critical infrastructure, financially motivated ransomware groups, and supply-chain compromises across a global vendor ecosystem. Security teams here would be working across domains like SCADA and ICS security, cloud infrastructure hardening for renewables management platforms, and protecting the data integrity of trading and logistics systems that move real commodities in real time.
The technical domains - oil exploration and production, refining, trading, shipping, solar, wind, battery storage - each carry their own security requirements and operational constraints. Defending a wind farm's supervisory control layer is a fundamentally different problem than securing a crude oil trading desk, yet both sit under one corporate umbrella. The breadth of the portfolio means security operations must account for everything from endpoint protection on remote field equipment to identity and access management across global corporate systems.
