NLB and NAT gateway both don't have a Security Group. The major difference is that their network Interfaces have different Source and Destination check settings.
Now For ALB and for CLB, the source and destination check is 'true' and for NLB & NAT gateway it is 'false'. Also, they have the ability to check for whether to allow traffic or not.
Do you want to master AWS, then do checkout the aws certification training by Intellipaat.
For more details on Elastic Load Balancer, you can check out the video tutorial by Intellipaat.