So you want to become a Web Security Researcher?