Is there a good shortish course / book / site out there that would take a developer from "I get the ideas and happily use burp" to "so that's how pentesting works"?

It seems a valuable way to spend the rapidly smaller training budgets