> Have you tried pentesting/security?

I haven't, but as mentioned in other comments, my passion is in investigating and fixing known bugs (not finding unknown ones).