I work as a manual sw tester now, would like to hear more about how to get into security testing, what tech/non-tech skills are necessary