Veolia's cybersecurity challenge is infrastructure-scale. The company manages water treatment and distribution for 111 million people, waste operations for 46 million residents, and produces 44 million MWh of energy annually - across 56 countries with 215,000 employees. That's a sprawling OT/IT attack surface: SCADA systems controlling water flow, industrial control networks at waste processing facilities, and energy grid interfaces. The threat model isn't theoretical; municipal water and energy systems are high-value targets for nation-state actors and ransomware groups alike.
Working here means defending critical infrastructure where the consequences of a breach extend well beyond data loss. The domains span operational technology security, industrial control system (ICS) hardening, and the convergence challenges that come with connecting legacy OT environments to modern IT networks. Veolia's position across water, waste, and energy verticals means the security team operates at the intersection of public utility regulation, environmental compliance, and real-time operational demands.
The company describes itself as mission-driven, focused on ecological transformation - making cities more sustainable and industries more efficient. For a security professional, that translates to protecting systems where uptime and integrity directly affect public health and environmental outcomes. The scale is massive, the infrastructure is critical, and the work happens on the ground across dozens of countries with varying regulatory frameworks and threat landscapes.
