How do you start this line of work? I think I am pretty versed in many security topics and I "think" I would see (some) vulnerabilities in systems, but I don't know where to start. Do you just "pick a target" and start digging?