Practice

Tools are useful. Thinking is the skill.

Vulnerability Research

Web Pentesting
Source Code Review
API Security
Logic Flaws

Tools & Technologies

Burp Suite
Nmap
Metasploit
Python
Go
Wireshark

Specializations

Cloud Security
Reverse Engineering
Cryptography
OSINT