Gaining a Foothold: Penetration Testing as a Second Career