1. Red Team
   1. Vulnerability Assessment
   2. Source Code Review
   3. Penetration Testing
      1. Infrastructure Pentest ( network , IoT, User Machines, Active Directory....)
      2. Web Application Security {Apps | Web | API }
      3. Mobile Pentest
         1. Android Pentest
         2. iOS Pentest
   4. Security Research
2. Cloud Security
   1. Cloud Infra {AWS | Azure | GCP....}
   2. Docker & Container Security
   3. DevSecOps
3. GRC (Governance Risk & Compliance)
   1. Audits
   2. Compliance Reports - SOC1, SOC2, SOX, ISO-27001 and more
   3. Risk Management and Process Validation
4. Identity & Access Management
   1. Privilege and Access Management
   2. Identity Management
   3. Login - Single Sign-on , SAML, OAuth.
   4. Active Directory, LDAP , Azure AD
   5. CyberArk Management, Okta, 2FA/MFA
   6. IAM on other AWS, GCP , Azure or any platforms
5. Blue Team
   1. Threat Intelligence
   2. DLP ( Data Leak/Loss Prevention)
   3. Antivirus / EDR Management
   4. SIEM ( Security Incident & Event Monitoring)
   5. (SOC) Security Operations Center
   6. (WAF) Web Application Firewall
   7. Incident Handling & Response
   8. Firewall / Network / VPN /Proxy Management
   9. Malware Analysis
   10. Digital Forensics
   11. Threat Hunting
   12. Reverse Engineering
   13. Email Security
6. the departments can be clubbed together or be separate like PT team also doing cloud PT , & VAPT .. or Code review.. There is no hard line difference , teams can do more than one function
7. Organization Structures decide if SOC/ IHR / SIEM /WAF..... these act standalone department or handled by same team
8. by - @EthicalHackX