Well, you got to start somewhere! I burnt out from front-end development last year and decided to pivot into security. There are plenty of entry-level certifications you can start looking at if you want to explore this area more:
- Security+ from CompTIA
- eJPT from eLearnSecurity
- OSCP from Offensive Security
> I reported it, they said it was not an issue but then fixed it a month later and I could only enter in three before getting locked out.
Don't let your past outcomes with vulnerability disclosure dissuade you from continuing if this field really interests you. Many people have received the short end of the stick through public disclosure programs. But it's a drop in the bucket compared to many of the other amazing things you can do here.