Types of Cyber Security: 8 Areas Explained for Beginners

Cybersecurity is not one job. It is a family of related areas, each protecting a different part of an organization's technology. Lists online say there are five, seven or ten types, depending on how they group them. This guide uses eight common areas, explains each in plain language and names the jobs you would do in it.

1. Network Security

Protecting the network that connects everything: firewalls, segmentation, VPNs, intrusion detection and secure configuration of routers and switches. Jobs: network security engineer, firewall administrator, network penetration tester.

2. Application Security

Making sure websites, mobile apps and APIs cannot be abused: secure design, code review and testing against risks such as those in the OWASP Top 10. Jobs: web application penetration tester, application security engineer.

3. Cloud Security

Securing systems hosted on cloud platforms such as AWS, Azure and Google Cloud: identity and access settings, storage permissions, logging and configuration. Misconfiguration is the most common problem. Jobs: cloud security engineer, cloud security analyst.

4. Endpoint Security

Protecting laptops, desktops, servers and phones with endpoint detection and response (EDR) tools, patching and hardening. Jobs: endpoint security engineer, SOC analyst.

5. Identity and Access Management

Controlling who can log in and what they can do: passwords and multi-factor authentication, single sign-on, privileged accounts and directories such as Active Directory. Much of a real attack is about stealing or abusing identities; see Active Directory attacks explained. Jobs: IAM analyst, identity engineer.

6. Data Security and Privacy

Protecting sensitive data wherever it is stored or sent: encryption, data loss prevention, backups, and compliance with laws such as India's Digital Personal Data Protection Act. Jobs: data protection analyst, privacy specialist.

7. Security Operations and Incident Response

Watching for attacks around the clock, investigating alerts and responding when something happens, including digital forensics. Jobs: SOC analyst, incident responder, threat hunter, forensic analyst. This is where many freshers start.

8. Operational Technology (OT) and IoT Security

Protecting the systems that run factories, power plants and smart devices, where an attack can cause physical harm. A specialist area that usually builds on network security experience.

And Two That Cut Across All of Them

• Offensive security: penetration testing and red teaming test every area above by attacking it with permission.
• Governance, risk and compliance (GRC): policies, audits and risk management that decide what each area must achieve.

Where to Start

For most beginners, the strongest starting points are network and application testing on the offensive side, and security operations on the defensive side, because they teach skills that every other area uses. Our Offensive Security Track covers the offensive side (application, network and Active Directory testing), and our SOC and DFIR course covers security operations, 6 weeks each. Our jobs, courses and certifications guide helps you choose a first role.