Cybersecurity Domains
Cybersecurity contains many specialties. Not every security professional performs penetration tests, and most real security programs depend on collaboration across several teams.
Cybersecurity contains many specialties. Not every security professional performs penetration tests, and most real security programs depend on collaboration across several teams.
Red Team and penetration testing
Authorized offensive teams simulate realistic attacks to find weaknesses before criminals do. Typical work includes reconnaissance, validation of vulnerabilities, reporting and helping defenders reproduce findings. Common roles include penetration tester and red-team operator.
Blue Team
Defensive teams monitor systems, investigate alerts, analyze logs, respond to incidents and improve detection. Common roles include SOC analyst, incident responder and security analyst.
Purple Team
Purple teaming connects offensive and defensive work. Attack simulations are converted into better detections, stronger controls and measurable improvements rather than treated as separate competitions.
Security engineering
Security engineers design and maintain controls such as identity systems, network segmentation, secure configurations, access policies and automation. They make secure behavior reliable at scale.
Application and cloud security
Application-security specialists help developers prevent and fix software weaknesses. Cloud-security specialists protect workloads, identities, storage and networks in platforms such as AWS, Azure and Google Cloud.
Governance, risk and compliance
GRC roles translate business, legal and regulatory requirements into policies, risk assessments and security programs. They help organizations decide what to protect first and how to prove that controls work.
Choosing a direction
Do not specialize too early. First learn networking, the Termux shell, basic programming, web technologies and clear technical communication. Those foundations transfer to nearly every security role.