How to become web security researcher