DEV Community

Discussion on: I'm a security auditor and researcher, Ask Me Anything!

Collapse
 
terceranexus6 profile image
Paula

As you already have a solid programming base and general understanding, I would suggest you to focus your efforts in joining online communities to be updated. Some people think security is kind of a lone-wolf job, nothing further than reality. Keeping the right news, communities and tech-pals around you is important. I'm mostly in Spanish communities, but there are tons around the world.

I would experiment, too. Either trying online capture the flag, or building your own laboratories. Take a close look to OWASP wiki.

I think you are aiming to be a zero-day hunter. For that, I think reading and learning about older vulnerabilities could guide you into what kind of vulnerabilities appear in new versions of different applications and OS. Good luck with it!