He tells us that he "was working on a sandbox to brush up [his] Linux kernel programming skills". I don't deny that he has to prove himself, but there's definitely potential. And I didn't mean that he will get paid like security professionals, he could even just search for an unpaid internship to get his foot in the door. - No unwarranted exception, but I can see what you mean.